Minimum Role Needed to Edit Specific Tenant Settings
-
Hello Team!
What is the tenant role with least permissions I can assign to a user, If I need them to have access to edit specific tenant settings? This appears to be tenant_manager?
Is it possible to create a custom role, or an alternate out of the box role (or configuration), that would provide access to edit only MFA settings, or password settings etc?
-
@batmysta I know this is a bit of a "trick" answer, but the reality is the right answer depends on what exactly you want the user to have access for. I understand that the roles in FusionAuth may give more access than you may like (I.E. MFA is a tenant level settings, but there is no role just for MFA edit.), but there are some other options.
Again, depending on what you want to do and what version you are running, there is the idea of the Tenant Manager applicaiton. This will still not help you with MFA settings thought.
The other option is using the APIs. Since everything in The FusionAuth admin UI is API first, you could create your own application that would allow users you choose to edit them.
Hope this is useful.
-
M mark.robustelli referenced this topic