System administrator role permissions

The System Administrator role members have access to all the Identity Administration portal tabs and the CyberArk Identity Connector Configuration Program settings. They are also the only administrators who can perform the following tasks:

• Add users to or remove them from the System Administrator role.

• Modify the Account Customization tab on the Settings page in the Identity Administration portal

• Modify connector settings in the CyberArk Identity Connector tab on the Settings page in the Identity Administration portal.

• Modify policy sets.

• Grant Global Account permissions.

• Grant Global System permissions.

These rights cannot be assigned to other roles. However, you can add users to the System Administrator role. See Create roles.