Skip to content

Role based private group/room access #357

Open

Description

@shortstack

Is your feature request related to a problem? Please describe.
Currently, assigning users to a role gives them that role, but that role can't designate what private group/room they get put in because the role is only scoped globally, and does nothing.

Describe the solution you'd like
We need to be able to have users dropped into their respective private rooms/groups based on the global role that gets assigned via SSO/OAuth.

Currently, assigning users to a role gives them that role, but that role can't designate what private group/room they get put in because the role is only scoped globally, and does nothing.

If I change the scope of that role (that the user is already part of) to rooms vs global, the user does not get put into the rooms assigned to that role.

Ideally, adding them to a role that is tied to rooms/private groups puts that user into those rooms/private groups.

Describe alternatives you've considered
Manually adding users to rooms via the API, which is not ideal.

Activity

  1. tazire commented on Aug 11, 2020

    @tazire

    Came here to request this.
    Essentially when i go into the role permissions I want to be able to assign channels that the role will automatically join. The work around as stated above is to individually add each user to a room or make an invite link more publicly available which could result in unwanted users joining the channel.

  2. brendan-mccoy commented on Feb 24, 2021

    @brendan-mccoy

    This would add so much functionality. Channels need more thorough ACLs than they have now. IMO this and more seamless voice/video experience would make rocket.chat a real contender.

  3. rediahila commented on Mar 8, 2021

    @rediahila

    please add this feature! thanks for such great project

  4. OdinWynd commented on Apr 4, 2021

    @OdinWynd

    This would be an awesome feature!

  5. Momaus commented on Sep 4, 2023

    @Momaus

    Is there anything new on this topic?
    We also need a way that allows association members to have automatic access to some channels without giving interested parties access to interna.

    We had the idea, if it is possible to program a bot, which automatically adds the members to the channels based on their roles.

    Has anyone tried this before?

  6. diegolmello commented on Sep 4, 2023

    @diegolmello
    Member

    You can achieve a similar behavior with teams feature: https://docs.rocket.chat/use-rocket.chat/user-guides/rooms/teams
    Of course, importing roles from SSO would be better, but you can create teams to achieve that behavior in the meantime.

  7. Momaus commented on Sep 4, 2023

    @Momaus

    Thanks for the quick answer.
    Might be a stupid question, but how exactly does a team solve this issue?
    If you have a private team, you always have to add the members manually, right? And with read-only teams, the non-members can still read everything.

  8. diegolmello commented on Sep 4, 2023

    @diegolmello
    Member

    We need to be able to have users dropped into their respective private rooms/groups based on the global role that gets assigned via SSO/OAuth.

    It's not the ideal workflow, but you can manually assign users to their teams and that would add them to their rooms.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions