Re: [D] Can't create DomainAdmin Account to Domain [cloudstack]

["hiblinux (via GitHub)" <gi...@apache.org>]

GitHub user hiblinux closed a discussion: Can't create DomainAdmin Account to Domain

##### ISSUE TYPE
 * Questions

##### COMPONENT NAME

~~~
Create Account And Users
~~~

##### CLOUDSTACK VERSION

~~~
CloudStack 4.19.1.1 
~~~

##### SUMMARY
<!-- Explain the problem/feature briefly -->
I have a Role named Domain Admin L2 with the Role Type of Admin and linked to the "admin l2" account in the ROOT domain (Csv rules attached).

The problem I encounter is that when I want to create a new account in the Sub-domain, let's call it ROOT/CS/Customer1, using the available default role named Domain Admin with Role Type DomainAdmin, an error appears stating 'can not create an account with access to more privileges they have themself.'

From the CSV i see the Domain Admin L2 role has more privileges than Domain Admin role.

What is wrong with what I'm doing?

![image](https://github.com/user-attachments/assets/5ab9a126-1569-410c-b61b-912df4f46fa8)


[Domain Admin_DomainAdmin.csv](https://github.com/user-attachments/files/18111649/Domain.Admin_DomainAdmin.csv)
[Domain Admin L2_Admin.csv](https://github.com/user-attachments/files/18111651/Domain.Admin.L2_Admin.csv)


GitHub link: https://github.com/apache/cloudstack/discussions/10099

----
This is an automatically sent email for users@cloudstack.apache.org.
To unsubscribe, please send an email to: users-unsubscribe@cloudstack.apache.org