Genesys Cloud - Main

 View Only

Sign Up

Expand all | Collapse all

Authorization when the supervisor only wants to change the user's password

  Thread closed by the administrator, not accepting new replies.
  • 1.  Authorization when the supervisor only wants to change the user's password

    Posted 03-18-2021 04:11
    No replies, thread closed.
    Hi,

    We have a request to give some supervisors the authority to change the passwords of all the users in the organization.
    However, since the system administrator is responsible for adding, deleting, and editing users, they wanted to give the supervisor only the authority to change the password.

    So I gave the supervisor only the "Directory>User>setPassword" permission.
    After granting the permissions, I selected any user from the list in the user management screen and checked if the password was changed, but the error shown in this image appeared.



    I have confirmed that the Resource Center article only says to grant "Directory > User > All permission".
    https://help.mypurecloud.com/articles/manage-people-page/

    If I only want to change the password or edit the user, do I still have to go to Directory > User > All permissions?
    If possible, I would like to be able to use only those functions by checking only the necessary permissions in the All permissions as shown in the image here.
    Is this not possible due to the specification of GenesysCloud?

    I'd be happy to get some advice.

    best regards,


    #SystemAdministration
    #Unsure/Other

    ------------------------------
    nozomi Owada
    Mitsui Knowledge Industry Co., Ltd
    ------------------------------


  • 2.  RE: Authorization when the supervisor only wants to change the user's password

    Posted 03-19-2021 06:30
    No replies, thread closed.
    Hi there
    I had/have a similar need and ran into this same issue back in August 2019. I opened a case with Customer Care then and here's what they said. Basically, it's not possible. 

      As advised by George on the Community forum, there is currently no option for a User to have a role that will only allow "Reset Password" in particular. 

      The permission needed to do it will also allow the User to do a bit more with the Directory > All Permission role. 

      Going through the API via the Developer Tools might be the best option for you right now.



    I did not explorer the API suggestion as it was not a good fit for the users I wanted to have password reset permission, but it may be something to consider, More details about that are here in a discussion post
    Reset Password Permissions


    ------------------------------
    Emily Kammerer
    Ascendium Education Group, Inc.
    ------------------------------