Administrator Types in a Multitenant
Portal 
The specific tasks which a portal administrator can perform in a multitenant portal environment depend if the user is a global or tenant administrator, and to which specific administrator role the user is assigned.
The following table summarizes the default activities assigned to global and tenant administrators:
|
System Admin |
User Admin3 |
Content Admin4 |
Super Admin8 |
Global administrator |
· Manage all portal tenants · Create portal systems · Create portal desktops (combining portal themes and framework pages)1 · Create portal display rules1 · Configure tenant-specific logon screens |
· Administrate (view, create, modify, and delete) all users, groups, and roles (global and tenant-specific) · Delegate user administration to a tenant user administrator |
Create and manage all portal content (iViews, pages5, worksets, and roles) |
· Responsible for overall integrity of the multitenant portal environment · Prepare the multitenant portal environment · Create portal tenants · Configure tenant-specific logon screens |
Tenant administrator |
Not applicable2 |
Administrate (view, create, modify, and delete) users, groups, and roles in the same tenant |
Create and manage portal tenant-specific content5,6,7 |
Not applicable3 |
1 It is possible to assign these tasks to tenant administrators by extending tenant-specific roles or portal permissions.
2 Portal capabilities available in the super and system administration roles should not be made available to tenant administrators; these roles contain tools that enable tenant administrators to view data from other tenants. You can however create a new role with limited system admin tools, such as the Portal Desktop Editor and the Theme Editor.
3 When a tenant administrator is logged on to a portal tenant (see Logging on as a Tenant User), he or she has access only to the users, groups, and roles of the same tenant prefix.
4 Global content administrators can create and manage content that is relevant to all tenants or a specific tenant. Tenant content administers should create and manage content relevant to their tenant only.
Access to portal content must be restricted through explicit portal permissions set by a global administrator. Merely being logged on to portal tenant does not automatically limit the tenant administrator to the content of that tenant.
5 Includes framework pages that can be assigned to portal desktops by a system administrator.
6 Tenant administrators can create cross-tenant content and share it with other tenants using Portal Catalog folders with cross-tenant permissions. The super administrator must set up a folder for the tenant administrators.
7 Includes assigning tenant-specific content to tenant roles.
8 May also perform tasks available to the system, user, and content administrator roles.