No role below the tenant administrator can maintain reference data
Table of Contents
This page is a capture in the inbox bucket of the product backlog — a pre-sprint idea, not yet pulled into a sprint as a story.
1. What
The seeded roles give TenantAdmin every permission and give Operations read, write and delete on currencies and the currency junctions only. Operations holds no read on countries, calendars, currency groups, rounding types, monetary natures or market tiers, so it can change a currency but cannot see the values the currency screen must pick from. No role maintains calendars, classification lists, currency pairs or desk groups. Decide whether to widen Operations or to add a reference data role.
2. Why
The reference data screens hide their actions from anyone without the write permissions, so today only a tenant administrator can maintain reference data.
3. References
projects/ores.sql/populate/iam/iam_roles_populate.sql- Journeys: Add or correct a currency, Keep a holiday calendar right, Maintain a classification list