Admin, identity & access controls — found from sitemap — Unique AI

Cited by

Facts read from this source

• Custom roles creation channels Report an error

  “Custom roles are created through the Access Management UI or via the GraphQL API.”

• Custom roles UI feature flag Report an error

  “The Access Management UI (behind feature flag FEATURE_FLAG_NEW_ACCESS_CONTROL_UI_UN_11268) provides a straightforward way to create custom roles.”

• Role name constraints Report an error

  “Name - a human-readable name (max 100 characters). Must be unique within your company and cannot conflict with system role names.”

• Role description limit Report an error

  “Description (optional) - a short explanation of the role's purpose (max 500 characters).”

• Role inheritance Report an error

  “Inherits From - select one or more existing roles (system or custom) that this role should inherit permissions from. The new role will automatically receive all permissions of the selected parent roles.”

• Custom roles UI capabilities Report an error

  “Create a custom role with a name, description, and inheritance Edit name, description, and inherited roles of an existing custom role Assign/remove users to/from a custom role Delete a custom role (with impact summary)”

• UI no granular policies Report an error

  “The UI does not support defining granular permission policies (i.e., specifying which resources and actions a custom role can access beyond what it inherits). Inheritance is the only way to grant permissions through the UI.”

• Gatekeeper API endpoint Report an error

  “The Gatekeeper GraphQL API is available at: graphql POST {GATEKEEPER_API_URL}/graphql”

• Policy mutations Report an error

  “Use the adminAddPolicy mutation to grant a specific resource/action permission to a custom role”

• Policy fields Report an error

  “action The action being granted (from GatekeeperPermissions) read, write, delete, manage, create, list effect Allow or deny ALLOW or DENY”

• Bulk policy mutation Report an error

  “Use adminAddPolicies to add several permissions in a single call:”

• Remove policy mutation Report an error

  “Use adminRemovePolicy with the exact same fields to revoke a permission:”

• Resources list Report an error

  “chat Chat conversations message Chat messages content Knowledge base content folder Knowledge base folders assistant Spaces / assistants scope Scope configuration scope-access Scope access permissions feedback Feedback data benchmark Benchmarking data analytics General analytics analytics:chat-interactions Chat interaction analytics analytics:active-users Active users analytics analytics:user-chat-export User chat export magic-table Magic table feature due-diligence Due diligence feature app App repository mcp MCP connectors user User management group Group management membership Group/role memberships”

• Custom role id format Report an error

  “Custom role IDs are auto-generated with the format custom__<slugified-name>__<random-hex>. You cannot choose the ID.”

• Role deletion effects Report an error

  “Deleting a custom role removes all user assignments and inheritance links. Policies added via the API are also removed.”

• API policies not visible in UI Report an error

  “Policies added via the API are not visible in the UI - the UI only shows the role name, description, inheritance, and assigned users. Use the adminPaginatedPolicies query to inspect policies.”

• Inheritance transitive Report an error

  “Inheritance is transitive - if Role A inherits from Role B, and Role B inherits from Role C, then users with Role A also get all permissions from Role C.”

• Ownership restriction Report an error

  “objectOwner Ownership restriction own (user's own data), * (any owner)”

Scores citing this record

• The Automation Lead Admin, identity & access controls
• The Automation Lead Agent capabilities & guardrails
• The Automation Lead Admin, identity & access controls
• The Customer-Service Director Admin, identity & access controls
• The Customer-Service Director Agent capabilities & guardrails
• The Customer-Service Director Admin, identity & access controls
• The Data Protection Officer Admin, identity & access controls
• The Data Protection Officer Admin, identity & access controls
• The Head of IT Admin, identity & access controls
• The Head of IT Admin, identity & access controls
• The Skeptic Admin, identity & access controls
• The Skeptic Admin, identity & access controls
• The Works Council Member Admin, identity & access controls
• The Works Council Member Admin, identity & access controls