What is a one-sentence summary of your feature request?
Improvement to “Assigned Roles” / “assigned-roles”
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
We require several improvements regarding the “Assigned Roles” functionality:
1 - Make comments mandatory when removing a role (comments are already required for additions, but not for removals, yet we need them to track the rationale for such removals).
2 - When adding a role, allow searching for a beneficiary using a “Contains” mode instead of “Starts With” (it is more ergonomic to search for a person by their name, as our current internalDisplayName includes a prefix).
3 - Enable traceability of permissions at the role level rather than at the user level.
4 - Allow more granular AccessControlRules on scopes: Read, Modify, Add, Remove.
We need to restrict application managers to only viewing and removing permissions, while additions are managed by managers.
How do you currently solve the challenges you have by not having this feature?
Currently, we cannot make this functionality available to application managers as it does not fully meet our needs.
Without these enhancements, we will have to pursue a custom development solution.