New SaaS group Enterprise settings screen MVC
✏ ️ Figma link
Background
Group Owners who have "Enterprise Users" in their group (meaning any user matching a verified domain and/or any user that was provisioned by an IdP) have a handful of controls that will make managing their users easier, as well as providing increased user management tooling over what they have now.
This will apply to GitLab.com only and will only be available to group owners.
Group Owners may also want to claim users that aren't officially in their Enterprise yet. Using this new screen, they can search for users that match a verified domain but aren't claim, and they can claim them.
Requirements
Needed screens:
- User administration
- Billing
- SAML / LDAP / SSO (needs clarification)
- Domain verification
-
Workspace environment "management" (placeholder needs clarification)
- Prevent User from Deleting Account
- Prevent User from Creating Groups
- Prevent User from Creating Projects
- Data retention policy
- Session policy
- Disable personal billing page
- Credential Rotation policy (may live somewhere else)
- Claim Enterprise Users
User list based enhancements:
- Disable/enable 2FA
- Impersonate
- Session management
Concerns
- Labeling for the new section name.
- any missing sections that would exist in this new area (future iterations)
- UI/feature flow inconsistencies between SaaS versus Self Managed environments.
MVC
based on discussion with ~"group::workspace" we will need to add the setting to the top level group then iterate from there once Workspaces is functional.
Edited by Daniel Mora