Permissions configuration for Team Administrators

(0) Share

Report

Posted on by DKasp

225

Hello community,

I'd like to off-load the team administration from our System Admins to the individual Team leads (as noted in entity Team in field administratorid), but I'm not sure how to set up the permissions to do that:

When I set permissions on Team, all it allows me to do is allow users to do so on Org level, which means that that user is able to add or remove people from ALL teams within their organization, which is way more than just the team he's admin of.

I specifically created a Team Lead role for this, but I'd still like to further narrow down the permissions for these guys so they can only add or remove systemusers for their own teams (=where they are set as administratorid).

Is there a way to achieve this that I'm missing, or should I just write a plugin to check that the user is in fact the administrator of the group that a user is being added to/removed from ?

All responses (1)

Answers (0)

Suggested answer

SS-19081439-0 on at

Like (0)

Report

RE: Permissions configuration for Team Administrators

Hello,

If the Team entity doesn't have 'Append To' then it shouldn't allow users to add members into the Team. But yes since it is BU level it will let other users to add members regardless the administrator and if you remove 'Append To' then users won't be able to add new members.

I did a quick repro on v9 and it looks like we might have a bug which is allowing users to add member regardless of the 'Append To' in the list view. But if i go into the Team and try to remove from the sub-grid, it gives me Access Denied. I'll file a bug for that issue. You should be able to take the plugin route to restrict users from adding members who are not administrator of the group.