Operations permitted to SDAdmins and OrgAdmins

List of Operations permitted to OrgAdmin

OrgAdmin can convert a user into an OrgAdmin.
OrgAdmin can delete other OrgAdmin.
OrgAdmin can extend license subscriptions.
OrgAdmin can only add a new Org user and enable or disable login
OrgAdmin can add a secondary email to user accounts via CSV import or provisioning tools.

OrgAdmins can also manage your users via Zoho Directory and perform a number of operations like creating users, editing users, monitoring user activity, password reset, etc. To learn more, click here.

List of operations permitted to SDAdmin

SDAdmin can import users from the org account to the app account. They can also delete users.
SDAdmin can change a user into a requester or a technician.
SDAdmin with OrgAdmin privilege can enable/disable login to the app account user.
SDAdmin can change roles for a technician.
SDAdmin can change the roles of an OrgAdmin into that of a requester or a technician, however, they can't revoke an OrgAdmin privilege.
SDAdmin can add a secondary email to user accounts via CSV import or provisioning tools.
SDAdmins can edit the primary email of existing users, provided the OrgAdmin has enabled the option under ESM Directory > Organization Details.
SDAdmins can delete instances. Re-authentication may be required for SDAdmins when they initiate instance deletion.

Note: SDAdmin access is required to delete an instance. In case there is no SDAdmin assigned to an instance, then the OrgAdmin can delete the instance.