Administrator permission

The actions that administrator users can perform (manage users, computers and groups, as well as configuring and uninstalling the protection), are restricted to those computers or groups they have created or have permissions on.

User management

Users can:

Change their own credentials.
Create users.

Search of unprotected computers

Users can:

Create search tasks launched from computers on which they have permissions.
View and/or delete any of the previously created search tasks, but only from computers in groups on which they have permissions.

Group and computer management

Users can:

Create groups/subgroups (manual or automatic by IP address), and configure the protection profiles of the groups on which they have permissions. Administrator users cannot access a child group if they do not have access to the relevant parent group.
Delete groups on which they have permissions. You can only delete groups that don't have any computers inside, that is, prior to deleting a group/subgroup you must assign or move its computers to another group/subgroup. Once you have emptied a group/subgroup, you can delete it.
Edit the Comments field of those computers on which they have permissions, in the Computer details window.
Remotely access computers that belong to groups on which they have permissions.

Protection uninstall

Users can:

Configure uninstall tasks for those computers and groups on which they have permissions.
View and/or delete uninstall taks, but only on computers belonging to groups on which they have permissions.

Profile and report management

Users can:

Create and view new profiles.
Create copies of profiles on which they have permissions and view them.
Configure scheduled scans of specific paths for profiles on which they have permissions or which they have created.
View reports (on-demand reports, not scheduled ones) on groups on which they have permissions, provided those permissions apply to all the groups covered in the report.
Create tasks to send scheduled reports on groups they have permissions on.
View tasks to send scheduled reports on groups they have permissions on, provided those permissions apply to all the groups covered in the report. Otherwise, they will not be able to view the report sending task.