Hello - so I am thinking this is by design and need to confirm.
I have a user that belongs to a group with just the 'itil' role, which contains the 'certification' role. If I spin up a data certification instance that generate a certification task record (TSK record) the user gets it, is able to certify the CIs, but not able to assign the TSK record to himself; that is, the 'Assigned to' and 'Short Description' fields are read only.
Of course, users with 'certification_admin' role can re-assign as they please but they can also do other things as well (like configure certifications) which we would want to control.
I mean, you would think that if I am a member of a group that receives a task and I want to assume ownership of said task, I can just assign it to myself.
