A tenant admin can create a user with role EvmRole-super_administrator

[evertmulder]

#A tenant admin (role EvmRole-tenant_administrator, member of a none root tenant) can create a group for the tenant with the role EvmRole-super_administrator and a user in this group.

This user suddenly gain system level privileges that are way beond the scope of a none root tenant member, for example changing schedules or disable a entire appliance.

Btw. This is also possible using the API.

[lpichler]

@miq-bot assign @lpichler

[miq-bot]

@lpichler @lpichler is an invalid assignee, ignoring...