Segregate user account management function into a dedicated account and have the option to remove user account management from general privileged accounts such as Administrator or Supervisor.

Providing a user management only account and restricting user management from other privileged accounts such as Administrator or Supervisor. The aim it to segregate user account management role from that of general administrator role as part of segregation of duty requirements.

This ensures that administrator type accounts can't create secondary backdoor admin accounts that could bypass controls used to manage privileged account access.

It also ensures that the user account management account can only create accounts but has no access to the rest of the admin level functions.

Idea priority

High

Post comment

Admin

CARLOS SANDOVAL

Apr 1, 2026

IBM has assessed this idea and it has been identified as a possible candidate for a future release of the product, although at this time there's no commitment to implement the Idea.

Reply
Hide replies

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.

Shape the future of IBM!

Search existing ideas

Post your ideas

Specific links you will want to bookmark for future use

Segregate user account management function into a dedicated account and have the option to remove user account management from general privileged accounts such as Administrator or Supervisor.

Please enter your email address

RELATED IDEAS

Segregate user account management function into a dedicated account and have the option to remove user account management from general privileged accounts such as Administrator or Supervisor.