The following applies for a newly created active (=can log on to the AE system) user who has not yet been assigned any rights:
This user can ... |
---|
|
The user must not ... |
---|
|
Vice-versa, users who have been assigned unlimited rights can access all functions. They can stop processing, create or delete any number of objects or view all data listed in reports and statistics. Thus, users with many or all rights can intervene in your system and in worst case, they could also misuse their rights.