Hello,
We are using role based access control at a context level using Shared Teams, we do not currently use groups at all for our users. In the contexts we have a special role we called “Team Administrators” with suitable access control allowing members to adjust the role memberships in the context team. This allows a kind of distributed administration, with certain users at the context level being able to adjust permissions but only within their context.
In addition to this to simplify the user interface we are using profiles, and these loosely correspond to the different roles we use in the contexts. They basically translate as “Browser”, “Engineer” and “Eng Admin”. The issue is that updates to the profile are handled at the site level, so if a user initially gets setup with a Browser profile and they get promoted within the context to Engineer then they need their profile updated, which must be handled by a system administrator at the site level.
Is it possible to have a profile dynamically update based on a context role?
My thinking is that this might be achievable because the role memberships are dynamically translated to group memberships by the system, and it is possible to set Profiles using groups. Has anyone done it?
-----
Lewis
