Create a new user using access security

[Savvoulidis Iordanis]

I have an access database (mdb) file and a front end app (mde)
which use Access's security, with groups and accounts.
Groups are: grpDeveloper, grpAppAdmins, grpAppUsers.

I, as a developer (grpDeveloper), have full rights and belong to all groups.
But I also want to set the database so that a client's administrator (in
grpAppAdmins)
can create new users (both in grpAppAdmins and grpAppUsers groups) when
logged on.

This administrator of course should have less application rights than me,
but anyway this is not my real problem since I only give the mde file.
What kind of rights should I give to the client's administrator to do that?

I tried to give Administer rights on the database to the grpAppAdmins group,
but I still can't create/delete a simple user in the grpAppUsers group,
or another user in the grpAppAdmins group while logged as a grpAppAdmins
user.

Any help is appreciated.

TIA
Savvoulidis Iordanis
Greece

 

[david epsom dot com dot au]

The local administrator needs to be able to create
new users, and to move users into a group. They won't
be able to add or remove permissions, but they shouldn't
need to.

To be able to create and move, the local administrator
needs to be a member of the ADMINS group. You don't
need, and don't want to, add or remove permissions.

Because you don't want to give the local admin
power over everything, the local ADMINS group must
be different to the ADMINS group you used to create
the database. That is, you need to create a
new Security Workgroup, with different ID strings.
Then you need to re-create your security groups
inside the new security workgroup. If you do not
understand this, you need to read the Security FAQ
several times, and ask questions in the Security
newsgroup.

The 'administer' right to a database gives you
the right to change things like the start properties.

To administer security users, you need be a member
of the ADMINS group.

(david)