I want to create an IT role. Superadmin should only create this IT role and enable or disable the permission for this role anytime (which roles this Superadmin can assign to the users), if this admin wishes to.​ IT role should not be permitted edit any of the users.

The Superadmin will decide which roles an IT person (IT role) can assign to users. Users with role IT role can not assign the roles above their position, this is a simple funda. For example, such users (with the IT role) cannot assign Admin role.

Superadmin designed the IT role in such a way that he can assign Forum Admin, Writer and Writer Admin. Hence, he can assign these roles he wish to.

Permissions to setup for IT roles:

  • Such user can create a users.
  • Such user can block or activate the users.
  • Such user can assign the existing roles to the users he wants and can revoke it.
  • Such user cannot delete.
  • Did you try with drupal's default user and role creation? It should be done by default features. At which step are you getting problem?
    – CodeNext
    Commented Aug 3, 2016 at 8:36
  • i want only Superadmin should create this IT role not even other users whose role is admin. Commented Aug 3, 2016 at 8:39
  • For your very kind Information, But you are not explaining what problem you are getting in creating this? You are Just asking I want to create this. Then normal answer will be go to Admin/people and create. You should describe what is conflicting, what is not stopping you to create this? This question looks like, you are just asking, create for me. And there is nothing called Superadmin in Drupal, If you have created internally then you should list all and specify., So answerer will have idea what is the structure and they you should describe, what problem you are getting. Tht is Que.
    – CodeNext
    Commented Aug 3, 2016 at 9:01
  • Could you please describe what version of Drupal are you using, D7 or D8. So answerer can suggest, if there is any module to achieving your task.
    – CodeNext
    Commented Aug 3, 2016 at 9:05
  • @KadambiniDas Any feedback about my answer? Commented Oct 10, 2016 at 7:35

2 Answers 2


Looks like you should try the Role Delegation module. Some details from its project page:

... allows site administrators to grant specific roles the authority to assign selected roles to users, without them needing the administer permissions permission.

For each role, Role Delegation provides a new assign ROLE role permission to allow the assignment of that role.

The module also adds an assign all roles permission. Enabling this permission for a role is a convenient way to allow the assignment of any other role without having to check all the assign ROLE role permissions on the permissions page.

enter image description here


In addition to @Pierre.Vriens answer, You can look at following modules to fine-tune your need, if you are dealing with multiple admin roles.

1. Administer Users by Role

This module allows site builders to set up fine-grained permissions for allowing "sub-admin" users to edit and delete other users — more specific than Drupal Core's all-or-nothing 'administer users' permission. It also provides and enforces a 'create users' permission.

2. Role assign

RoleAssign specifically allows site administrators to further delegate the task of managing user's roles while withholding the Administer permissions permission.

Both module has D7 and D8 version. In case what you are using.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.