BPS Groups inside BPS Grops NOT NOW

4

I'm currently switching for BPS Groups, as a default for privileges management, and I can confirm, that this would be really helpfull to have it.

Simplest case, create a single group for access to application, which would have nested groups with specific permissions. No need to remember that i have to add user as a specific role, and also access to the application.

I can only associate myself with. The authorization concept takes some time getting used to.
For example, we also have managers who actively participate in workflows themselves. However, as the process progresses, managers have more authorizations.
Instead of being able to create a group with managers that I can then easily implement in various other groups and only having to replace the manager in one group when there is a change, you have to search through all groups where the employee may have been involved.

Good suggestion!

Let me provide a voice from the other side of this topic. The challenge with nested groups is the transparency. The more levels of nesting you have, the harder it is to say which users actually belong to the certain group.
Of course if you're a responsible admin, you'll manage it properly. However, it's one of those things that can get messy quick without proper, structured approach.

Please note you may also use AD groups in the process configuration whenever necessary.

For now we don't plan on extending the BPS groups with nesting. However, if this request keeps repeating (or is highly upvoted), we may re-visit it in the future.

Then, you can also add functionality to the user profile that shows which groups a person or group is a member of.

If not, a great workaround would be being able to clone groups with all the members inside and also being able to add users to the group from the user page, not only from the group page. This would make life much easier for customers with over 20 users and 5 apps.

Razvan, your voice has been heard. Once I have any updates, I'll let you know.

😍

Just for clarity: I meant we understood where you came from and gave it a proper thought.

There is also quite another side. If you can't manage permissions comprehensively from one place, you have to split the management between multiple systems (BPS, AD, etc.), usually having separate admins.
Anyway - I think such functionality would be great and maybe something could be done about it after all :)