Creating Roles that will be able to modify default roles

[yuliang11_]

Hi Forum,

  I've created a new Admin Role ,gave this roles a lot of Write access, and i assign this role to a new user. however i'm not able to view/edit the existing default ".Administrators"  & ".readOnlyAdministrators".  any idea what could go wrong? or the default admin role cannot be managed from other roles ? 

Thanks in Advance. 

[Jahmal_]

You are correct.  This is in the Admin guide if you search for "delegated admin".  Here's a snippet:

"Note that system administrators may only manage user roles, realms, and resource policies; only security administrators can manage administrator components."

By creating a delegated admin you will not be able to see/modify administrator components such as ".Administrators"  & ".readOnlyAdministrators".