This document describes the definition and use limits of the delegated admin account and its related operations.
The organization admin account can specify a member account as the delegated admin account of a TCO-enabled product. With the admin account's authorization, the delegated admin account can access the TCO organization and member information and manage the organization business in the console of the TCO-enabled product.
After setting the delegated admin account, organization management tasks and business management tasks can be separated, as the admin account and the delegated admin account are in charge of organization management and business management respectively. This conforms to the best security practices.
1. The delegated admin account can only be a member account rather than the organization admin account.
2. The number of delegated admin accounts that can be added is determined by each TCO-enabled product.
Adding delegated admin account
3. On the Organization service management page, click Add in the Operation column.
4. In the pop-up window, select one or multiple members as needed in the account selection area.
5. Click OK.
Note:
After the delegated admin account is added, you can use it to access the multi-account management module of the TCO-enabled product to perform related admin operations.
Removing delegated admin account
Note:
The removal operation may affect your normal use of the TCO-enabled product. Proceed with caution.
3. On the Organization service management page, click the number in the Delegated admin column.
4. On the Delegated admin page, click Remove in the Operation column of the target account.
5. Confirm the note in the dialog box and click Continue.
Note：
After the delegated admin account is successfully removed, it cannot access the TCO organization and member information in the TCO-enabled product console.