Description:
Currently, administrative capabilities are largely bundled into the Admin[SYSTEM] role. For larger organizations, this creates challenges regarding governance, security, and least-privilege principles.
We would like the ability to separate administrative responsibilities into distinct permissions, for example:
- Manage Users
- Manage Roles and Groups
- Manage Workspaces
- Manage Configuration and Scripts
- Manage System Settings
This would allow organizations to delegate responsibilities to specialized administrators without granting full system access.
Benefits:
- Improved security
- Better compliance with enterprise permission concepts
- Reduced risk of unintended configuration changes
- Easier integration into central identity and access management solutions
