Restrict recertification of workspace access recertification to workspace owners
Felix
We have have done a Pre-Check for an ISO27016 certification. One of the requirements we need to implement is a regular recertification of all permissions by a defined list of owners.
We want to implement this using meshStack's workspace role recertification feature.
Per Workspace, we have set two Owners. Out of those Owners, there is at least one available at all times, since they are each others holiday replacement.
Only the Owners
must be allowed to recertify access to the Workspace.I see two ways to implement this, both require changes to meshStack:
- Make it possible to deactivate the Workspace Manager role for our meshStack
- Make it possible to remove the "recertification" permission for Workspace Managers
Polina Sadykova
Thanks a lot for your request! We do understand that it is important for audit purposes to give a Workspace Owner the ability to recertify roles. Lars Töpfer Let´s talk shortly to clarify some open questions that will help us to support you on your request. Feel free to choose any date from the calendar: https://calendar.google.com/calendar/u/0/appointments/schedules/AcZssZ3CKr5hOFH0vyReqOgXy4p5O7gF3oURG5FEP9ky9vr6AFGxaUG-Bc0UmSqbEduT14V5ccldBwKM