As a FAW Security Administrator, do you need additional privileges to perform user-group management?

• A. No additional privileges are required.
• B. Yes, you must have FDI Platform Administrator privileges.
• C. Yes, you must be assigned FDI System Owner privileges.
• D. Yes, as a security administrator, you can perform user-group management if you are assigned FDI Service Administrator privileges.

Answer: (D)

In this area, who can manage users and groups is controlled by a specific administration privilege. A FAW Security Administrator can perform user-group management only if they are granted the FDI Service Administrator privileges. This role is the scoped permission that covers service-related tasks like provisioning and managing users and groups, aligning with the principle of least privilege.

Having no additional privileges isn’t enough because user-group management touches security configuration and access control. The broader Platform Administrator or System Owner roles are not necessary for this task and grant more access than needed. The Service Administrator role is the appropriate and sufficient permission for this responsibility.