Hi,
Is there a way to create a user that can manage (e.g. Create, Delete) user accounts and nothing else?
Hello,
I'm not certain we can get to that high a level of role constraint, but you might want to review Role-base access control to see if that gets you close to something workable.
Regards,
Aaron
No this is not currently possible. To be more specific, you could create a role that only gives a user the permission to create or delete a user but there is no fine-grained control for the API call to create a user. That basically means that a user with that permission can create a new user who is superuser and has the permission to do everything.
Sounds like he can simply make himself a superuser account. Dangerous. So essentially for now not a good idea.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.