Super Administrators are users with exclusive privileges. They differ from Administrators as they have the capability to override configurations on permissions. By default, the Super Administrator group is already included in the Run Time User Role, but no user is assigned to it initially.
For some exceptional cases, such as rolling back the Workflow State of a form, you need to log in as a Super Administrator to have a one-step rollback of the form state. Before using the Super Administrator role, you should assign a user (e.g., yourself) to the run time user role 'Super Administrator' (refer to 'How to Configure' below).
The following privileges are some of them that are configurable:
1
Update & Delete Record
Update: Edit the fields on the record.
Delete: Remove the record permanently.
2
Delete Record Only
Delete a record permanently.
3
Undo/ Withdraw Record
Undo: Undo the last action.
Withdraw: Restore the record to the beginning state (i.e. Saved).
4
Perform Workflow Action
Take action regardless of the current stakeholders.
5
Change Record Owner
Change the record owner (i.e. the record creator)
6
Change Current
Stakeholder
Add or replace current stakeholder so that other shareholders can read/change/delete or take action for a record.
7
On Behalf of Other User
Perform actions on behalf of other users. More of this privilege will be discussed below.
8
Data Export
Export data from a table even ‘Allow export’ is not checked in the widget level.
Super administrator mode can be enabled in Run Time on ALL Environments. Each time users turn on the super administrator mode, the system will require them to enter the password again.
Click on the Current User Profile icon to turn the Super Admin on.
Upon successful login, the label ‘Administrator Mode’ will be shown in the right bottom corner to indicate the super administrator mode.
Users are now free to perform their privileges in the system.
All actions performed by the super administrators are recorded in the Activity Log. Users with reading permission can always track the changes made by the super administrator.
To examine a specific record, click on the 'Display' icon next to it.
To examine a specific record, click on the 'Display' icon next to it.
Super administrators can create, update records or even take actions on behalf of authorised users for them.
Click the Current User Profile icon on the top right corner
2. Click the On behalf of the icon.
3. Select the user from the list whom you want to represent and click ‘Apply’.
4. You will see his/her name in the top right corner.
It is possible that only specific users can be represented by the user with a super administrator role.
Go to the Super Administrator Settings in the Run Time User Roles. Change the configuration for the ‘On Behalf of Other User’ to ‘Specific’.
..and click the ‘Select User’ icon to select users.
To add users, mouse over the Super Administrator group and click the ‘Settings’ icon to enter the ‘Super Administrator Settings’.
Only the user on this list can log in as ‘Super Administrator’ for the ‘special access rights’.
You can choose the user and assign them the ‘Super Administrator’ right individually and click the ‘Submit’ button to confirm the changes.
Why can’t I perform the action when the record is under ‘Saved’ state even though I am granted the ‘Perform Workflow Action’ in Super Administrator Settings?
Super Administrators granted with the ‘Perform Workflow Action’ privilege can take workflow actions for the current shareholders except for the ‘submit’ action. It is because we believe that record creators may have some concerns on the record when they save it instead of submitting it. Therefore, even the super administrators should not be authorized to ‘Submit’ the record for the record creator.
Why am I not authorized to access the page even though I am a super administrator?
Due to the design of the platform, only users with Run Time User Role are authorized to access the page. Therefore, apart from the Super Administrator group, the super administrators have to have another run time user role in the App so they can read the page.