Grant

Select Grant to allow Users to grant Run and Automatically deploy permissions to other users for applications. By default, members of the System Administrator Role have Grant permissions for all objects. In addition, users who add objects to CyberArk Identity have the Grant permission on the objects they add.

Users who are assigned the Grant permission on a set, however, can only assign permissions they have on the members of the set.

For example, If you only have the View permission on members of an applications set, you cannot grant other members the Run permission.