@smartkomm/plexus-cli 0.1.9 → 0.1.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -887,8 +887,11 @@ is refused (`FORBIDDEN`, naming the field) when it would create a tenant, use
887
887
  `tenant.*` key except `branding`, `brandingAssets`, `notificationChrome` (modules,
888
888
  `defaultApplicantGroupKey`, `mailLevel`, `magicLinkLogin`, `externalSignIn`, terms, …) or the import `source`
889
889
  — name a `foundation.users` address that is not an active member with a login, or put a
890
- `_platform.*` right in a group; changing groups or `foundation.users` additionally needs
891
- `administration.permissions.manage` / `administration.users.manage`. `wipe`, `prune-offers`, `--scope platform` and setup mode
890
+ `_platform.*` right in a group; changing groups needs `administration.permissions.manage`,
891
+ changing `foundation.users` needs `administration.users.manage`, and giving, moving or taking a
892
+ user's group there (a user new to the config, `permissionGroupKey`, `unitKey`, validity,
893
+ `additionalMemberships`) needs `administration.permissions.manage` as well — the rule the
894
+ Rechteverwaltung asks. `wipe`, `prune-offers`, `--scope platform` and setup mode
892
895
  stay platform-only. Recipe:
893
896
  [playbooks/users/cli-access-for-tenant-admin.md](./playbooks/users/cli-access-for-tenant-admin.md).
894
897