User Mgmt Role

Is there a way to create a user that can manage (e.g. Create, Delete) user accounts and nothing else?


I'm not certain we can get to that high a level of role constraint, but you might want to review Role-base access control to see if that gets you close to something workable.


No this is not currently possible. To be more specific, you could create a role that only gives a user the permission to create or delete a user but there is no fine-grained control for the API call to create a user. That basically means that a user with that permission can create a new user who is superuser and has the permission to do everything.

Sounds like he can simply make himself a superuser account. Dangerous. So essentially for now not a good idea.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.