goauthentik / goauthentik/authentik
Different Role Object Permissions for authentik admins group
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
**Describe your question**
I dont know if this is intended behaviour or a bug. I want to create a user manager role, which can modifiy users and groups but cant elevate permissions to authentik superuser. Currently users with the user manager role can add themselves and other to the authentik admin group. I tried to explicitly set the Role Object permissions to only view the authentik admin group to the user manager role, but the default user manager group permissions get added. Can I somehow prevent the user manager role from modifying users in the authentik admin group?
**Version and Deployment:**
- authentik version: 2025.2.1
- Deployment: docker-compose
Contributor guide
Assessment
This issue has not been assessed yet.