"User Manager" role not behaving as expected

Plan: Business
Hosting: Cloud

Goal: Trying to allow a user to manage user permissions, i.e. invite users and assign roles/groups

Action taken: Placed user in group with permissions to ā€œuser managementā€

Expectation: User can see ā€˜User Settings’ page and perform administrative actions.

Reality: User can see ā€˜User Settings’ page but can only suggest users to invite

Is it not possible to grant such permissions or have I potentially missed something fundamental?

Thanks

1 Like

@ferret141

In Retool, this is expected behavior. Being in a group with ā€œuser managementā€ doesn’t allow inviting users.

Only users with Admin or Owner roles can actually invite and manage users.

Update the user’s role to Admin in Settings → Permissions, and it will work.

Hi @ferret141 ! Just following up to see if you still need assistance with user permissions.

@WidleStudioLLP is correct here - you would need to promote a user to Admin to be able to invite other users.

At this time, the "user mangement" permission category does not include the ability to invite users, but I will create an internal feature request to consider adding this in the future!

Here is more info about the "User Management" permission category if you are interested!

-Jen

1 Like

Hi @ferret141 :slight_smile:

Sharing an update about this - it is possible for Admins to delegate the creation of user invites for other users via API key on the Business and Enterprise plans.

Here's more info about access tokens and how to specify scopes/permissions when using the token.

Let us know if you need anything else!

-Jen

1 Like

Thank you for the follow up Jen.

If I understood correctly between what you and Widle have said, the following is true?:

From a front-end perspective you need an admin/owner role to invite users.
Even if you create a new role and give that role user invite permissions it will not work because there are dependencies tied to the default admin/owner roles.

From a back end perspective, the user invite API endpoint can be used on business/enterprise plans as a workaround to this.

1 Like