Viewing groups

Use the group reference right to grant delegated admins the right to see what groups a user is a member of without granting group resource management rights.

About this task

To grant a delegated admin the group reference right:

Steps

Run dsconfig with the create-delegated-admin-resource-rights option.

dsconfig create-delegated-admin-resource-rights \
    --rights-name DArights  \
    --rest-resource-type groups  \
    --set enabled:true  \
    --set admin-permission:reference  \
    --set admin-scope:all-resources-in-base

Result

The admin can see the user’s group memberships on the entry preview’s Group Membership tab.