I'm having trouble configuring specific users in iQ so they have full control over anything within a Profile, but only have read-access to other profiles.
Scenario: I want George to be have full control over profile A (including being able to edit js in templates, add users, etc). However, I want George to be able to only read/look at profile B (ie. not edit template JS, extensions, etc).
How do i create permissions to that effect?
If you give a user ("A") just rights in one profile, that user cannot create a user ("B") with any more rights than they themselves have.
Here's creating the user ("A")
And here's what happens when the user A tries to create a user B with permissions on all profiles;
The permissions are grayed out. If the user A tried to create a user with permissions on the "blank" profile, to which A does have permissions, then they would be able to do it.