One Admin user should not allow to revoke other user's Admin priviledge

[saas]

Consider a scenario -

A user of Role CEO having admin rights (tick admin check box). He creates a user profile of his subordinate as Sales Manager. Now CEO Admin delegates Admin rights to Sales Manager by checking the Admin check box. Now both CEO and Sales Manager are having Admin priviledge.

I found that in this scenario, Sales Manager is able to revoke Admin right of CEO, by unchecking Admin check box against CEO's user details.

However, system should not allow this. One user of Admin priviledge should not be allowed to revoke Admin priviledges of other user.

Can any one please let me know, if we need to do some other setting so that One user having Admin priviledge is not allowed to revoke Admin priviledges of other user.

Thanks in advance.

[eNick]

It's an interesting dilemma but...

Imagine if the CEO later wants to remove the Sales Manager's admin rights?

If the system worked as you suggest, he'd not be able to do so. All he'd be able to do is ask the Sales Manager to remove his own admin rights!

The whole point of an admin is that they can do anything, to anything in the system. Anything less is not an administrator.

[saas]

Thanks eNick, for your prompt reply.

Yes, your point is very valid. In that case a CEO will have to ask sales manager to revoke his Admin rights.

I can suggest the following solution to achieve what I wish --

"There should be a super-admin profile. The Admin access to this profile should not be able to be revoked by any other user having Admin rights. But super-admin should be allowed to revoke any user's admin right."

Please let me know your views.

Regards,

[andopes]

Actually Sugar 5.5 will introduce an admin privilege hierarchy.

Cheers

[saas]

Actually Sugar 5.5 will introduce an admin privilege hierarchy.

Oh! That's Great!! Any idea, when sugar 5.5 CE is likely to get released?

[andopes]

The plan is to September.

Cheers