tcld icon indicating copy to clipboard operation
tcld copied to clipboard
verified publisher icon temporalio

feat: allow account role to be set to none

Open captainbeardo opened this issue 10 months ago • 1 comments

What was changed

If a user was added via SCIM, setting their account role to none is valid. The call will fail if the user is not a SCIM user.

Why?

So user's can have only group derived roles assignments.

Checklist

  1. How was this tested:

Unit test and manual test of SCIM user

captainbeardo avatar Mar 05 '25 21:03 captainbeardo

does this need to be exposed via tcld? curious what the use-case is (i'm assuming SCIM users always have an unspecified account role).

also: reminder to test the locally built tcld against staging.

shakeelrao avatar Mar 20 '25 17:03 shakeelrao

does this need to be exposed via tcld? curious what the use-case is (i'm assuming SCIM users always have an unspecified account role).

This is specifically to allow users who existed before SCIM and have an account role to be removed from their roles so that they are like new SCIM users.

captainbeardo avatar Apr 30 '25 15:04 captainbeardo