Prompt: The Title and Introduction paragraph in this box provide a convoluted description of a product concept called a limited access permission profile. The first paragraph is intended to serve as an introduction to an article on setting up a limited access permission profile.
Title: How to use permission profiles to give admins access they need specific apps and not every app
Introduction: \[Product Name] has the concept of permission profiles that users can use to limit access for admins to only accessing data and apps that they need to do their job. For example an IT admin doesn’t need to have access to running payroll for other employees or viewing their comp information; however they will need to be able to configure authentication and password policies for their companys employees. By default administrators have access to all company data. If you want to make sure admins like IT admins only have access to what they need, we recommend creating a new permission profile (‘IT admin only) with limited access permissions (not full admin rights) profile which only include access to IT apps and data and not all the HR data. Then you’d be able to assign the profile to your IT administrators.
| | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ### After Editing: #### Limit Administrator Access with Permission Profiles By default, \[Product Name] *administrators* have access rights to all \[product] apps and data. \[Product Name] uses *permission profiles* to limit access to the specific apps and data an employee needs for their role. For example, the role of an IT admin typically doesn’t require permission to access payroll apps or compensation data. However, an IT admin’s role does require permission to configure employee authentication and apply password policies. To limit access rights for employees who are IT admins, you can create a new permission profile called **IT Admin** and limit that role’s specific job requirements to the authentication and password apps. You then assign that profile to employees who are IT admins**.** To limit administrator access to specific apps and data, follow these steps to create a new **permission profile** for each role in your organization: \[Task follows] ***