It should support operations at different levels in the country ie at facility, district and country levels. This also means that the system restricts users by level of operation. Eg a user at facility should only be able to create only users for that facility
Since the CHT doesn't support this this user-management-tool currently handles all authentication/authorization via CHT. Are you okay if we rely on UI sugar to restrict how/where users can be created?
Basically - a user could login to the CHT and create a user in a level outside their level. But this tool would only be able to create it a user within their level.
this should be okay