Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve docs on how to revert the initial set OCIS_ADMIN_USER_ID #10771

Open
JoFeKW opened this issue Dec 13, 2024 · 1 comment
Open

Improve docs on how to revert the initial set OCIS_ADMIN_USER_ID #10771

JoFeKW opened this issue Dec 13, 2024 · 1 comment

Comments

@JoFeKW
Copy link

JoFeKW commented Dec 13, 2024

The customer was looking for a way to revert the right set using the initial set OCIS_ADMIN_USER_ID.

This can be done via WebUI/API.

Switch to role provisioning is possible via OIDC if needed

@wkloucek

@wkloucek
Copy link
Contributor

Background:

Whenever a user, whose ID is configured in OCIS_ADMIN_USER_ID logs in, the user is configured to have the admin role.

When the ID configured in OCIS_ADMIN_USER_ID is changed, the previously logged in user DOES NOT loose the admin role. Another admin user could still change the user role of that user via WebUI or API.

From my point of view, this is the expected outcome and only needs to be reflected in the documentation.

If role changes should be dynamically managed, OIDC role provisioning is the way to go.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants