<p>Non-admin users cannot change permissions for Admin users.</p>

<p>However, I agree with what you've said on users being able to assign groups and permissions. On practically every site I build, I need the client to be able to assign users to the groups <strong>that I created</strong>, but not be able to change a new user's permissions manually. This should definitely be separated in to two different options in the control panel.</p>

<p><strong>UPDATE</strong>: In <a href="https://craftcms.com/changelog#2-6-2996" rel="nofollow noreferrer">2.6.2996</a> Craft added this functionality:</p>

<ul>
<li>The “Assign user groups and permissions” permission has now been
split into “Assign user permissions” and “Assign user groups”, and
the latter now has nested permissions for each of the user groups.</li>
<li>Users with the “Assign user permissions” permission are no longer
allowed to grant new permissions to user accounts that they
themselves don’t already have.</li>
</ul>

CC BY-SA 3.0
2016-11-24T12:22:29.370Z
2017-12-14T09:48:39.027Z
2017-12-14T09:48:39.027Z
darylknight
<p>I've been here before <a href="https://craftcms.stackexchange.com/questions/14796/users-allocating-permissions-beyond-their-own">Users allocating permissions beyond their own</a> and the only solution offered was to <a href="https://craftcms.uservoice.com/forums/285221-feature-requests/suggestions/12285582-users-with-the-assign-user-groups-and-permissions" rel="nofollow noreferrer">vote for it as a feature request</a>, which I did. But after 7 months there have only been 10 votes for it.</p>

<p>I can't understand how so few people find this a problem.
You need to give someone the ability to add users and put them in a suitable user group, but you then give them a free pass to increase their own access permissions and potentially reduce the access permissions for me the prime admin, this can't be acceptable for any user management system.</p>

<p>I need to have an administrator role that can register users and put them into suitable groups, but not let that person manage the permissions for themselves or others.</p>

<p>The most obvious option is to separate "assign user groups" from "assign user groups and permissions"</p>

CC BY-SA 3.0
2016-11-24T12:37:25.220Z
One short term solution might be to hide (via css) the Permissions tab unless you are a full admin. But I haven't got a clue where or how to do that.
Paul Frost
CC BY-SA 3.0
2017-12-14T09:46:39.833Z
Update - this has been added to Craft now. Users can't assign permissions greater than their own anymore.
darylknight
<users><permissions>
How can I separate assign user groups and permissions for users?
# How can I separate assign user groups and permissions for users?

(Asked by: username_0 on 2016-11-24)

I've been here before [Users allocating permissions beyond their own](https://craftcms.stackexchange.com/questions/14796/users-allocating-permissions-beyond-their-own) and the only solution offered was to [vote for it as a feature request](https://craftcms.uservoice.com/forums/285221-feature-requests/suggestions/12285582-users-with-the-assign-user-groups-and-permissions), which I did. But after 7 months there have only been 10 votes for it.

I can't understand how so few people find this a problem.
You need to give someone the ability to add users and put them in a suitable user group, but you then give them a free pass to increase their own access permissions and potentially reduce the access permissions for me the prime admin, this can't be acceptable for any user management system.

I need to have an administrator role that can register users and put them into suitable groups, but not let that person manage the permissions for themselves or others.

The most obvious option is to separate "assign user groups" from "assign user groups and permissions"

**Tags:** users, permissions
> **Comments:**
> **username_0**: One short term solution might be to hide (via css) the Permissions tab unless you are a full admin. But I haven't got a clue where or how to do that.  
> **username_1**: Update - this has been added to Craft now. Users can't assign permissions greater than their own anymore.  

---

## 1 answers

### Answer by username_1 on 2016-11-24. Score: 2 | Accepted answer

Non-admin users cannot change permissions for Admin users.

However, I agree with what you've said on users being able to assign groups and permissions. On practically every site I build, I need the client to be able to assign users to the groups **that I created**, but not be able to change a new user's permissions manually. This should definitely be separated in to two different options in the control panel.

**UPDATE**: In [2.6.2996](https://craftcms.com/changelog#2-6-2996) Craft added this functionality:

* The “Assign user groups and permissions” permission has now been
  split into “Assign user permissions” and “Assign user groups”, and
  the latter now has nested permissions for each of the user groups.
* Users with the “Assign user permissions” permission are no longer
  allowed to grant new permissions to user accounts that they
  themselves don’t already have.


---

