Security Data User Permissions

There are various user permissions related to managing data security.

Permission Name	Description	Actions Impacted by Permission
Admin Security	The ability to modify domains, permissions, roles, user groups, user accounts, and remove locks in Capital Access Manager. Users without this permission can only view their own account details in read-only mode (that is, cannot modify details), but can change their password. Note The ability to modify License Policy on User Accounts or User Groups is controlled by separate License Policy User Permissions.	Import of user administration data Migration of user administration data using "CapitalMigrate.exe -user" See the Upgrade guides for Capital. Create, Edit and Delete User Accounts, User Groups, Roles, and Domains Convert All Existing Accounts to Derived Access Control Convert All Existing Accounts to User Access Control Convert All Included Accounts to Derived Access Control Convert All Existing Accounts to Delegated Sign On Convert All Existing Accounts to User Login Convert All Existing Accounts to User Based License Policy Convert Selected User Accounts to User Based License Policy Set Users Active/Inactive Export Users last Login activity action Security Exporter Service Security Importer Service Removing Locks on a User Account
Bypass Plugin Authentication	Administrators can bypass the custom authentication plugin for specific user accounts to control the user authentication from the Capital software instead of third‑party applications.	User Data Synchronization task
Edit Domains	The ability to create, edit and delete domains.	Creating a Domain Deleting a Domain
Edit Roles	The ability to create, edit and delete roles.	Creating and Editing a Role Deleting a User Account, User Group or Role
Edit User Groups	The ability to create, edit and delete user groups.	Creating and Editing a User Group Deleting a User Account, User Group or Role
Export User Administration Data	The ability to export users, domains, roles and user groups from Capital Access Manager.	Export the User administration data Premigration of user administration data using "CapitalPremigrate.exe -user" See the Upgrade guides for Capital. Security Exporter Service
Import User Administration Data	The ability to import users, domains, roles and user groups in Capital Access Manager.	Import of user administration data Migration of user administration data using "CapitalMigrate.exe -user" See the Upgrade guides for Capital. Security Importer Service
User Accounts- Create	The ability to create new user accounts.	Creating and Editing a User Account
User Accounts- Delete	The ability to delete existing user accounts.	Deleting a User Account, User Group or Role
User Accounts- Edit	The ability to assign privileges to existing user accounts.	Creating and Editing a User Account

Parent Topic:

Permissions

Capital Access Manager User Guide, 2512.2606

Unpublished work. © 2026 Siemens