Role based private group/room access

[shortstack]

Is your feature request related to a problem? Please describe. Currently, assigning users to a role gives them that role, but that role can't designate what private group/room they get put in because the role is only scoped globally, and does nothing.

Describe the solution you'd like We need to be able to have users dropped into their respective private rooms/groups based on the global role that gets assigned via SSO/OAuth.

Currently, assigning users to a role gives them that role, but that role can't designate what private group/room they get put in because the role is only scoped globally, and does nothing.

If I change the scope of that role (that the user is already part of) to rooms vs global, the user does not get put into the rooms assigned to that role.

Ideally, adding them to a role that is tied to rooms/private groups puts that user into those rooms/private groups.

Describe alternatives you've considered Manually adding users to rooms via the API, which is not ideal.

[tazire]

Came here to request this. Essentially when i go into the role permissions I want to be able to assign channels that the role will automatically join. The work around as stated above is to individually add each user to a room or make an invite link more publicly available which could result in unwanted users joining the channel.

[brendan-mccoy]

This would add so much functionality. Channels need more thorough ACLs than they have now. IMO this and more seamless voice/video experience would make rocket.chat a real contender.

[rediahila]

please add this feature! thanks for such great project

[OdinWynd]

This would be an awesome feature!

[Momaus]

Is there anything new on this topic? We also need a way that allows association members to have automatic access to some channels without giving interested parties access to interna.

We had the idea, if it is possible to program a bot, which automatically adds the members to the channels based on their roles.

Has anyone tried this before?

[diegolmello]

You can achieve a similar behavior with teams feature: https://docs.rocket.chat/use-rocket.chat/user-guides/rooms/teams Of course, importing roles from SSO would be better, but you can create teams to achieve that behavior in the meantime.

[Momaus]

Thanks for the quick answer. Might be a stupid question, but how exactly does a team solve this issue? If you have a private team, you always have to add the members manually, right? And with read-only teams, the non-members can still read everything.

[diegolmello]

We need to be able to have users dropped into their respective private rooms/groups based on the global role that gets assigned via SSO/OAuth.

It's not the ideal workflow, but you can manually assign users to their teams and that would add them to their rooms.