Class DynamicTenantRoleOptions
Options for runtime-defined (dynamic) tenant roles, configured via AddThargaDynamicTenantRoles(IServiceCollection, Action<DynamicTenantRoleOptions>).
public sealed class DynamicTenantRoleOptions
- Inheritance
-
DynamicTenantRoleOptions
- Inherited Members
Properties
ManageScope
The scope required to create / edit / delete a team's custom roles — enforced by the service-layer
authorization decorator and the TenantRoleManager component. Defaults to
Manage (team:manage); set to a narrower scope (e.g. access:manage)
to move custom-role administration onto a dedicated admin surface without also granting the broad
team:manage.
public string ManageScope { get; set; }