topic Re: Allow users to update custom properties only in QMC in Management & Governance

Allow users to update custom properties only in QMC

fabios — Wed, 29 Jan 2025 17:06:43 GMT

Hi all,

In our governed self-service setup, we would like to enable a subset of power users to manage app-level access autonomously.

To achieve that, we need to set up a security rule that allows a user to update only custom properties within the user window. They will need to have access to the user window, since app-level access is managed through a specific custom property, but they shouldn't be able to change the role of other users.

Target user journey:

- Power user accesses QMC

- Power user navigates to "Users" section

- Power user updates value for custom property "AppLevelAccess"

- Power user has no way of updating user roles

Is this achievable?

Kind regards,

Fabio

Re: Allow users to update custom properties only in QMC

Levi_Turner — Tue, 28 May 2019 18:36:56 GMT

You cannot demarcate by custom property values, i.e. custom property named foo with values of bar, bar1. But you can restrict by the definition (i.e. foo). For an example, see bullet point 9 onward in this https://github.com/eapowertools/qs-event-driven-cross-site-app-promoter

Re: Allow users to update custom properties only in QMC

fabios — Fri, 31 May 2019 13:29:03 GMT

Not sure I understand.

With your example, I can restrict updates to custom properties but not to users. I need to restrict updates in the "Users" tab, so that my power users can assign new custom properties, but not change someone's role.

Re: Allow users to update custom properties only in QMC

Levi_Turner — Thu, 06 Jun 2019 12:50:46 GMT

With your example, I can restrict updates to custom properties but not to users. I need to restrict updates in the "Users" tab, so that my power users can assign new custom properties, but not change someone's role.

Yeah, not going to be possible.