You can assign a user or group all privileges for the domain and then grant the user or group full permissions on all domain or repository objects. However, this user or group cannot complete the tasks determined by the Administrator role.

For example, a user assigned the Administrator role for the Mass Ingestion Service can configure Mass Ingestion Service properties in the Administrator tool. A user assigned all domain privileges and permissions cannot configure Mass Ingestion Service properties.

The user assigned the Administrator role for the Mass Ingestion Service can perform the following tasks:

Browse all mass ingestion specifications.
Edit a mass ingestion specification.
Run a mass ingestion specification.
Delete a mass ingestion specification.

A user who is not assigned the Administrator role can perform the same tasks as the user who is assigned the Administrator role, but the user can browse, edit, run, and delete only the mass ingestion specifications that the user creates.