Custom roles

[truealex81]

First of all, thanks for such a great product! The design and feature set are fantastic.
I’m currently exploring how we could use it in our organization, and as far as I can tell, there are only two supported roles right now: ADMIN and USER.

It seems like this might not be enough for fine-grained permission control. For example, how can we have regular users that can only use agents and users who are allowed to create and share agents? At the moment, either everyone can create agents, or they all need to be admins. Or maybe I’m just missing something about how it’s supposed to work?

It would be really helpful to have support for custom roles, ideally ones that can also be assigned to users via their token (I’m using Azure EntraID for role-based authorization).

I tried manually adding a MANAGER role to the database, hoping I could manage it via the UI, but unfortunately that didn’t work.
Is there any plan to support this kind of functionality?

At a high level, it could look like this:

1. Configure the required roles in the config:

roles:
  - ADMIN
  - USER
  - MANAGER

2. When a user logs in, check what role comes with token and update user role in the database.
3. Permissions can be edited in the UI (already implemented).

[codearranger]

@truealex81 see #11985