Which function can a limited admin user not perform?

A limited admin user in Sage Intacct is designed to have restricted access, allowing them to manage certain administrative functions without overpowering permissions. One key capability that distinguishes a limited admin is the inability to create new admin users. This restriction is in place to maintain security and control within the system, ensuring that only users with the highest level of authorization can establish new admin accounts, which can alter the configuration and permissions of the system significantly.

In contrast, a limited admin is typically allowed to view user accounts to have awareness of who has access and what roles they play, might edit user permissions within their scope, or deactivate user accounts as part of user management. These functions maintain operational oversight and ensure that user roles are appropriately managed without compromising the overarching security framework that restricts admin account creation.