goauthentik / goauthentik/authentik

Different Role Object Permissions for authentik admins group

Open
#13,376 2 comments 1 reaction 0 assignees View on GitHub
question
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**Describe your question**
I dont know if this is intended behaviour or a bug. I want to create a user manager role, which can modifiy users and groups but cant elevate permissions to authentik superuser. Currently users with the user manager role can add themselves and other to the authentik admin group. I tried to explicitly set the Role Object permissions to only view the authentik admin group to the user manager role, but the default user manager group permissions get added. Can I somehow prevent the user manager role from modifying users in the authentik admin group?

**Version and Deployment:**

- authentik version: 2025.2.1
- Deployment: docker-compose

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.