Access Rights let you manage ERA Web Console users and their permissions. There are two types:
1.Native Users - user accounts created and managed from the Web Console.
2.Mapped Domain Security Groups - user accounts managed and authenticated by Active Directory.
Optionally, you can set up Two-Factor Authentication for Native Users and Mapped Domain Security Groups. This will increase security when logging into and accessing ERA Web Console.
Access to items from either category must be granted (using Permission Sets) to every ERA Web Console User.
The Administrator native user account has access to everything. We do not recommend you using this account on a regular basis. We strongly advise that you create another 'admin' account or use Administrators from Mapped Domain Security Groups with the Administrator Permission Set assigned to them. This way you have a fallback should anything happen to the admin account. Also, you can create additional accounts with narrower access rights based on your desired competences. Use the default Administrator account only as a backup option.
Users are managed in the Users area of the Admin section. Permission Sets define the level of access to different items that different users have.