Granting rights to edit group members only for a specifc group

[Community Alums]

Is there a practical way to grant rights to add and remove users to/from a specific group to a particular role?

For example, can I grant permissions to the the knowledge_admin role to allow it to add and remove users to/from the "KB Editors" group, but not to any other group.

Thanks

[manikorada]

Shimon,

You should be able to achieve that by adding/modifying the ACL's for 'sys_user_grmember' table which is the M2M table which holds relationship between Group and USer

[randrews]

i can see a couple of ways to do this....

1) very specific write an acl that checks to verify you are in one specific group and allow edits of that group by one specific role...

2) create a user editable check box on the group form... then if this is true allow people with a group edit role the ability to modify the group roles.. so a condition of user editable is true and a role of group admin < a role you created>

actually just thought of a third and possibly better way...

3> allow edits by the group manager... write an acl that lets the manager of a group edit it's members.

[Community Alums · Accepted solution]

So it turns out ACLs wont do it. The solution that worked was to create a service catalog item for it, and add/remove users via script in the workflow.