"Create user" as a permission
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Proposal
Add "Create user" as a new permission option in GitLab's permission management system. This will allow administrators to specifically grant user creation privileges to certain roles or users, providing more granular control over user management.
Currently, user creation is typically tied to admin privileges, but having it as a separate permission would enable:
- Delegating user creation rights without granting full admin access
- Better audit tracking of which roles/users can create new accounts
- More flexible user management workflows for large organizations
Technical Details:
- Add new permission flag "can_create_users" to the permissions schema
- Update user management UI to include this new permission option
- Modify user creation endpoints to check for this specific permission
- Add appropriate audit logging for this permission
Success Metrics:
- Successful implementation of the permission flag
- Ability to assign/revoke this permission independently
- Proper enforcement of the permission across all user creation touchpoints
- Audit logs correctly tracking usage of this permission
Description was generated using AI
Edited by 🤖 GitLab Bot 🤖