indigo-iam / iam

INDIGO Identity and Access Management Service
https://indigo-iam.github.io/
Other
99 stars 43 forks source link

New accounts should be created with a set of default groups #758

Open maarten-litmaath opened 2 months ago

maarten-litmaath commented 2 months ago

Currently, a new account is created with no group memberships, which have to be requested or assigned separately.

It would be good if a set of default groups and roles could be configured by the VO admin(s), to be assigned automatically to any new account (any unwanted group for an account can always be removed later).

At the very least, the VO root group should be automatically configured, so that e.g. voms-proxy-init may already work without an extra step for ordinary users.

If at least that last option could be implemented easily, it would be good to have that available very soon, thanks!