System Administrator Accounts
During deployment of GlobalSearch, two users/groups are created. A group is created that allows for System Administrator rights. Anyone added to this group is given full system privileges. A user is created to manage the necessary services for GlobalSearch to run.
It is best practice not to use the service account for general everyday access to GlobalSearch.
System Administrator Group - User part of the System Administrator Group have full admin rights. They can Create/modify/delete new databases, archives, index fields, searches, manage security, add/remove users, etc.
Service Account User - This is an individual user account that is part of the System Administrator Group. This account used to run backend services.
If you change the password for the service account, the services will need to be updated with the new password.
Cloud
GS Cloud Admin Group - This is the System Administrator Group for GlobalSearch Cloud instances. Any user added to this group will have full admin rights within GlobalSearch. The TenantAdmin account is part of this group and should not be removed from it.
TenantAdmin - This is the Service Account User for GlobalSearch Cloud instances.
On Premise
SSAdmin - This is the System Administrator Group for GlobalSearch On Premise instances. Any user added to this group will have full admin rights within GlobalSearch. The ssAdministrator account is part of this group and should not be removed from it.
ssAdministrator - This is the Service Account User for GlobalSearch Cloud instances.
Best practice is to minimize the number of system administrators. For those who require system admin rights, it is best practice to use their own account and NOT the service account.
Adding a System Administrator Account
Cloud
Create the Square 9 User.
Add the user to the GS Cloud Admin group.
The GS Cloud Admin group is NOT assigned to any databases, archives, or searches. Add users to other Square 9 groups to give them the proper level of access to databases, archives, and searches or secure the user individually as needed.
On Premise
Create a Windows Active Directory User.
Add the user to the SSAdmin group.
The SSAdmin group is automatically secured to all databases, archives, and searches.