Dokploy / Dokploy/dokploy

Add option to assign "global" roles/permissions

Open
#4,654 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
TypeScript
Stars
37.4k
Forks
3k
Avg merge
1d 3h
Merged PRs (30d)
73

Description

What problem will this feature address?

Currently we can only assign permissions and roles per organization. This means that for us currently, if we wanted to add a new member to our Dokploy instance and give them access to our Dokploy organizations, we will have to add the user each time separately to each organization and give them the correct roles. If we want an user to be create new services only, we have to go to each organization and allow that for each of them apart.

Describe the solution you'd like

It would be handy to have a global option to allow a role or user to get permission to do an action across all organizations.

Dumb example would be: if we have a developer that can only create new service, we can give them a global permission that allows them to go and create services in each organization without us having to change those settings separately per organization.

Describe alternatives you've considered

Right now, due to having so many organizations, we have decided to give our developers full admin access so they can do whatever they need to do. This works, but defeats the entire purpose of having roles and permissions in the first place.

Additional context

No response

Will you send a PR to implement it?

No

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files, tests, or entry points. Start by locating the existing organization-scoped roles and permissions implementation, then trace how permissions are checked across organizations. Done means a role or user can receive an action globally without repeating the setting for each organization.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authorization, backend
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.