What is a limitation of a Global Administrator's access?

A Global Administrator typically has expansive permissions within an Illumio environment, but there are certain limitations to their access. One key limitation is their inability to manage users and roles. This means that while they can control and configure many aspects of the security landscape, they do not have the authority to add, modify, or remove user accounts or the roles associated with those accounts. This restriction is designed to protect the integrity of the user management system and ensure that such critical changes are handled by designated personnel or other administrative roles.

This focus on maintaining a separation of duties helps to prevent unintended changes or abuse of privileges within the administrative framework. It’s important to ensure that user management is performed by individuals specifically assigned to that responsibility, creating a more secure environment overall.