From 57fa05501bfabcc1099503ed2f4817bf6ff0fc2a Mon Sep 17 00:00:00 2001 From: "Grot (@grafanabot)" <43478413+grafanabot@users.noreply.github.com> Date: Thu, 10 Feb 2022 16:02:16 +0100 Subject: [PATCH] add the permission to read org users to team creator (#45224) (#45245) (cherry picked from commit 9fafbfc87e4d79243265c727eb5dbe737a45c6d6) Co-authored-by: Ieva --- pkg/api/roles.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pkg/api/roles.go b/pkg/api/roles.go index 0fc5d75723e..98cc6bdc57e 100644 --- a/pkg/api/roles.go +++ b/pkg/api/roles.go @@ -215,11 +215,12 @@ func (hs *HTTPServer) declareFixedRoles() error { Role: accesscontrol.RoleDTO{ Name: "fixed:teams:creator", DisplayName: "Team creator", - Description: "Create teams.", + Description: "Create teams and read organisation users (required to manage the created teams).", Group: "Teams", - Version: 1, + Version: 2, Permissions: []accesscontrol.Permission{ {Action: accesscontrol.ActionTeamsCreate}, + {Action: accesscontrol.ActionOrgUsersRead, Scope: accesscontrol.ScopeUsersAll}, }, }, Grants: teamCreatorGrants,