Prevent a role from being delegated

You can prevent roles from being delegated to users.

About this task

By default, the following roles cannot be delegated.
  • admin
  • public
  • nobody
  • role_delegator, a user with the role_delegator role cannot delegate this role to other group members

Procedure

  1. Navigate to User Administration > Roles.
  2. Open the role.
  3. Configure the form to add the Grantable or Can delegate fields.
  4. Clear the check box for one or both of these fields.
  5. Click Update.