Is there a way to let users toggle roles when logging in?
There are sometimes scenarios where specific users need to be granted user rights beyond their "day job". This could be in support of a project or other specialized role. Rather than add user rights to a subset of users, its beneficial to setup a separate role for that need. However, one user cannot have two roles, necessitating the creation of separate local accounts. Is there a means to associate two roles to one user? That would allow us to maintain the security of SSO and MFA for the user account, allow the user to toggle roles as needed, and give IT the flexibility to revoke the added role when no longer needed. I've seen this in other enterprise systems and it works well.
0 · Share on Twitter