Introduction:

In the ever-evolving landscape of user management and permissions, staying in control is crucial. A recent feature has emerged to address this need, offering more granular control over account administrators' actions. This blog post will delve into the details of this feature, its purpose, benefits, and how it simplifies the lives of users and developers.

What Problem Does It Solve?

This feature addresses the need for more precise control, as highlighted above. By separating the permissions for inviting and managing users, it empowers organizations to define roles with greater specificity and avoid security issues stemming from excessive permissions.
 

Steps

Here are the steps to follow:

1. Log in as an Admin User.

2. Navigate to "Control Panel > Accounts" and add an account entry.

3. Proceed to "Control Panel > Users and Organizations > Users."

4. Add a user (e.g., "test1").

5. Create a regular role with the "Invite User" permission for account entry and assign it to the user.

6. When user "test1" logs in, they will only have the ability to invite users through the interface, and the "Assign Users" option will not be available.

In conclusion, this feature offers a powerful solution for organizations seeking precise control over their account administrators' actions. By separating “Manage Users”  and “Invite User” permissions, it enhances security, simplicity, and customization possibilities, ultimately making life easier for both users and developers.

This feature will be available in the upcoming Q4 quarterly release.