Grant

Select Grant to allow users to grant any permissions to other users for applications, systems, domains, databases, services, or accounts. By default, members of the System Administrator role have Grant permissions for all objects. In addition, users who add objects to the Privileged Access Service have the Grant permission on the objects they add.

Users who are assigned the Grant permission on a set, however, can only assign permissions they have on the members of the set. For example:

• if you have the Grant permission on a set that includes two computers, you can only grant other users the Manage Session permission if you have the Manage Session permission on both computers in the set.
• If you only have the Checkout permission on the members of the set, you cannot grant other users permissions such as Login or Update Password.
• If you only have the View permission on members of an applications set, you cannot grant other members the Run permission.