Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root


1 badge earned


Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!


Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.


Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!


Feature Request: More granular permissions

The current roles/permissions do not provide enough granularity for controlling access to components, metrics, scorecards, fields, teams, and templates.

We need another role in between `Full User` and `Product Admin` that allows for non-view permissions (create, update, delete) of these objects.

Any `Full User` can currently go in and change anything, even for components/metrics/etc that they do not own.  Releasing this tool into our organization would quickly result in it becoming the "wild west" and we would never be able to trust or rely on the accuracy or standardization of the data.

This problem is further exacerbated by the lack of any audit log for objects...e.g user changed title of component X, user removed link from component y.

1 comment

Josh Campbell
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
Oct 25, 2023 • edited

Hey MS thanks for the feedback we really appreciate it! I've added you as a +1 to a backlog ticket we have for an audit log. I don't have an ETA for you on that but it's on our radar.

Have you checked out our config as code feature by chance? Managed components can only be updated by modifying a `compass.yaml` file in a component's repository effectively limiting edit access of a component to the repository owners. It is not a read-only user account role like you're asking but it's worth looking into if you haven't yet!

I've captured your ask for a read-only role, as well. I'd love to know if you check out config as code :)

Thanks for the update.

We're unable to use config as code unfortunately, primarily because Gitlab Self-Hosted isn't supported.  

We're looking at rolling our own version using the GraphQL API and the sullivtr/graphql Terraform provider, but that wouldn't gain us the "Managed components" status.

A potential alternative would be if there was a way to set/configure a component status to "managed", which would effectively remove the create/edit/delete operations for users in the UI.  Perhaps another feature request for that, if easier than implementing a "read only" role.


Log in or Sign up to comment
AUG Leaders

Atlassian Community Events