Answers.Body: <p>There are some implied permissions which you can see here: <a href="https://github.com/civicrm/civicrm-core/blob/3bb9adfc8b7b19d8ef5cb5e27b981bd9b61b8769/CRM/Core/Permission.php#L898" rel="nofollow noreferrer">https://github.com/civicrm/civicrm-core/blob/3bb9adfc8b7b19d8ef5cb5e27b981bd9b61b8769/CRM/Core/Permission.php#L898</a></p>
  <pre><code>public static function getImpliedAdminPermissions(): array {
      return [
        'administer CiviCRM' =&gt; ['implied_permissions' =&gt; ['administer CiviCRM system', 'administer CiviCRM data']],
        'administer CiviCRM data' =&gt; ['implied_permissions' =&gt; ['edit message templates', 'administer dedupe rules']],
        'administer CiviCRM system' =&gt; ['implied_permissions' =&gt; ['edit system workflow message templates']],
      ];
    }
  </code></pre>
  <p>So administer CiviCRM gives you access to both system and data admin.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2021-06-18T18:41:59.443Z
Answers.LastActivityDate: 2021-06-18T18:41:59.443Z
Answers.UserDisplayName: Demerit
Body: <p>What's the difference between the 'administer CiviCRM' and 'administer CiviCRM System' permissions? What are some examples of system administration tasks that are permitted under 'administer CiviCRM System' but not 'administer CiviCRM'?</p>
  
Tags: <permissions>
Title: Administer CiviCRM vs. administer CiviCRM System
ThreadText: # Administer CiviCRM vs. administer CiviCRM System
  
  (Asked by: username_0 on 2021-06-18)
  
  What's the difference between the 'administer CiviCRM' and 'administer CiviCRM System' permissions? What are some examples of system administration tasks that are permitted under 'administer CiviCRM System' but not 'administer CiviCRM'?
  
  **Tags:** permissions
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2021-06-18. Score: 4 | Accepted answer
  
  There are some implied permissions which you can see here: https://github.com/civicrm/civicrm-core/blob/3bb9adfc8b7b19d8ef5cb5e27b981bd9b61b8769/CRM/Core/Permission.php#L898
  public static function getImpliedAdminPermissions(): array {
      return [
        'administer CiviCRM' => ['implied_permissions' => ['administer CiviCRM system', 'administer CiviCRM data']],
        'administer CiviCRM data' => ['implied_permissions' => ['edit message templates', 'administer dedupe rules']],
        'administer CiviCRM system' => ['implied_permissions' => ['edit system workflow message templates']],
      ];
    }
  
  So administer CiviCRM gives you access to both system and data admin.
  
  
  ---
  
  