A user can only belong to a single permission group. Only the admin user can create or modify a user profile. Every user who is included in a group has all of the access privileges granted to that group. Only the admin user can create a permissions group and assign or modify privileges. In order to work on an element or a template, the user must belong to a group that has been given the appropriate access to the element or template and has been given at least read access to the domain in which the element or template resides.
Permissions descend downward from the topmost domain in which the group has rights.
If the permission group is granted permission to create domains in domainA , users in that group automatically gain the right to create subdomains in any of the domains that exist within domainA . If the permission group is granted permission to delete domains in domainA , users in that group automatically gain the right to delete any domains within domainA . Once a domain has been created, however, the administrator can change these inherited permissions. User Interface You are not required to use the user interface developed by Cisco. However, you may find the discussion of the Cisco-developed interface to be of help in understanding the capabilities of the software and how the servers can be made to work.