Overview

In Discover XI, a user’s ability to create and manage other user accounts is determined by their Team affiliation and the Team’s ACL rights (not by an individual per-user toggle).

This article is intended for administrators who need to allow an existing Team (or a specific administrator Team) to create additional users.

Solution

1. Confirm the symptom

   • If the Create user account action is missing/unavailable, or you cannot complete user creation, continue with the steps below.

2. Identify which Team the requesting user is in

   • In the Users list, click the requesting user’s name to open the detail view, which includes their team affiliation and available ACL rights.

3. Grant the required ACL rights to the correct Team

   • Open Users → Teams and select the Team that should be allowed to create/manage users.
   • Click Change rights of this team.
   • Enable (at minimum) the following rights for that Team:
   • cr_teamaccount — Write (allows creating new user accounts).
   • org_groupadmin — Write (allows administering all users of the Team’s organization, including creating/editing/deleting accounts).

4. Note: To edit a Team’s rights configuration, the administrator performing this change needs the groupadmin right.

5. Validate

   • Log in as a user from the updated Team and verify that the Create user account function is available and user creation succeeds.

6. If you cannot change these rights

   • If you do not have access to the Teams rights configuration (for example, you do not have groupadmin), contact your Discover XI administrator or Support.
   • Provide: the requesting username, the Team name, and screenshots of (a) the user detail view showing team affiliation/ACL rights and (b) the Team’s rights configuration.

<supportagent>

If a customer reports “I can’t create users” without a clear error message, ask for a screenshot of the user detail view that lists the user’s ACL rights, and confirm whether the user’s Team has cr_teamaccount (write) and org_groupadmin (write). If they cannot access Change rights of this team, confirm whether they have groupadmin.

</supportagent>

References

• Overview of the User Rights
• Overview of ACL Rights
• Users