New User Manager Role
We have introduced a new User Manager role. This role is designed to enable delegation of the user management tasks from users with the Admin role. The permissions associated with the role include authorised user creation, role assignments and user deactivation. This change aims to streamline administrative processes and improve system security by delegating specific responsibilities.
Effective:
- 10 July 2024 on Sandbox
- 11 July 2024 on Live
Users with the Admin role, now have the ability to create an authorized user with User Manager permissions. The User Manager will not have the ability to create, fund or confirm a payment run, nor will they be able to link or unlink a linked account.
The permissions of the admin role has not changed. This means that users with the Admin role will continue to have user management capabilities.
For system security purposes, the User Manager role cannot create or deactivate another Admin or User Manager. These changes are implemented to enhance system security by ensuring that critical operations and role management are restricted to Admin users only.
Affected Endpoints:
- POST/users
- GET/users
- GET/users/{user_id}
- PATCH/users/{users_id}
- POST/users/{users_id}/activate
- POST/users/{users_id}/deactivate
- POST/users/{users_id}/invite
More details on roles & permissions is available in our documentation