Hi team,
We are in a unique situation where we have confidential projects that require either to be allocated to the project in the demand entity, set as a stakeholder/project manager, or be an admin in PPO to view it.
due to this we have reviewed our admin level users so that not all of them can see confidential projects be default; we moved them to be a super user level and copied the general activities they can perform so they can do everything an admin can, minus viewing confidential projects.
The issue is that one of these activities is the ability to set up users; this is something we would expect a super user to be able to do, however in the process allows them to also change themselves from a super user to an admin resulting in them being able to see confidential projects again... a slight security problem.
Having checked the business rules set in PPO it appears that we are not able to set up rules for the users section of PPO, i was going to set up a rule so that a user can still raise new users, but cannot set them up to be an admin, only admins can do that. however due to this area not being managed in business rules this couldnt be done.
I wanted to see what potential options could be created for such a situation, and whether there was also any other approach such functionality could be delivered.
Thanks,
Josh