Tool: Multi-User Permission Management

[chipkent]

Multi-User Permission Management
What's Partially Available:

PQ configuration supports admin_groups and viewer_groups parameters (via make_temporary_config)
Auth client supports uploading keys to ACL server
What's NOT Available in Python APIs:

❌ User/group CRUD operations
❌ Permission assignment/revocation
❌ Role-based access control (RBAC) management
❌ Access control list (ACL) management (beyond key upload)
❌ User/group enumeration
❌ Permission auditing
Rationale: User/group management is typically handled by:

External Identity Providers (LDAP, Active Directory, SAML IdP)
Deephaven Auth Server (configured separately from client APIs)
Administrative UIs (not exposed via Python client API)
What MCP Could Potentially Support:

Setting admin_groups and viewer_groups when creating PQs (if add_query was exposed)
This would require understanding the existing group structure from the identity provider