"Create user" as a permission

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Proposal

Add "Create user" as a new permission option in GitLab's permission management system. This will allow administrators to specifically grant user creation privileges to certain roles or users, providing more granular control over user management.

Currently, user creation is typically tied to admin privileges, but having it as a separate permission would enable:

  • Delegating user creation rights without granting full admin access
  • Better audit tracking of which roles/users can create new accounts
  • More flexible user management workflows for large organizations

Technical Details:

  • Add new permission flag "can_create_users" to the permissions schema
  • Update user management UI to include this new permission option
  • Modify user creation endpoints to check for this specific permission
  • Add appropriate audit logging for this permission

Success Metrics:

  • Successful implementation of the permission flag
  • Ability to assign/revoke this permission independently
  • Proper enforcement of the permission across all user creation touchpoints
  • Audit logs correctly tracking usage of this permission

Description was generated using AI

Edited by 🤖 GitLab Bot 🤖