KB16861: How to create a User Manager account in MicroStrategy Developer

SYMPTOM:
Users may desire to create a user account that will only manage user accounts for Strategy Developer and nothing more.
 
ACTION:
Follow the steps below to create such user account:

• In Strategy Developer, use the Administrator account to browse through Administration > User Manager > System Monitors, as shown in the image below:
  

• Right click on the System Administrator's user group and select Grant access to projects.
• Disable all privileges for that folder.
• Change the Security Role Selection from 'Power Users + Inherited Access' to '+ Inherited Access' for every project source, as shown in the image below:
  

•  
  NOTE: This should not affect the main Administrator account since it does not inherit its privileges from the folder. This can be verified by right-clicking on the administrator account, selecting Grant access to projects, and making sure everything is still enabled and with 'Power Users + Inherited Access'.
   
  
• In the System Administrator's group create a new group (e.g. User Managers).
• Go to the Project Access tab.
• Under Administration, select Use User Manager. This will automatically add Create configuration objects, as shown in the image below:
  

• Create a new user inside this group.
• Right-click on the Administration folder, select Properties as shown in the image below:
  

• Go to the Security tab.
• Click Add button.
• Select the new group (User Managers). Click OK.
• Change 'Connect' to 'Custom'.
• Grant Browse permission and Deny the rest like shown in the image below:
  

• Repeat steps 8 through 13 for EACH of the individual user groups (except Everyone group), but grant Browse and Read, deny Write and delete, as shown in the image below:
  

The users created in the User Administrators group will not take up an Administrator License, will be able to create new users and grant privileges, will not be able to delete or modify existing users but will be able to move them from one group to another, and will not be able to access any project.