Create a custom privilege to constraint user management

Q&A
1

Is it possble to create a custom privilege to create users allowed only to manage users belonging to certain user groups and limit also which roles can be assigned to those users managed by these manager users?

For example, imagine we have users u11 and u12 belonging to group g1. We would like to create a manager user mu1 belonging to group g1 that could only add, update and delete users belonging to that group g1. In addition we would like that the roles that can be assigned to u11 and u12 by um1 to be a subset of the available roles.

Is it possible to do this through the Bonita Portal?

 

Thanks in advance

2

You can define a custom profile (with Teamwork, Efficientcy, or Performance editions), so you could give certain users access to the functionality to manage users without having the complete Adminstrator profile. However, you can't define a scope for which users they manage. 

The idea of a team manager profile, with permissions to manage a set of users, is something we have considered, and might add in a future release.

Chris