There is no way to see who holds the operator role #74

New Issue

2026-09-21T07:18:22Z

cgalo5758 commented

2026-09-21 07:18:22 +00:00

The question

The console's own role exists only in the identity provider's token and is read into the session at sign-in; nothing in the database records who holds it, and the roles that are stored are organization memberships, not console roles. Listing operators in the people directory would be useful, and it cannot be answered from what the console keeps. Where does the answer come from?

What depends on the answer

Whether the console persists what a token said, and how honestly it can label the result. It is the same question for a second console role, so it is settled with the split between an operator and an administrator.

Options known so far

Record the roles carried by each sign-in against the person, and present the list as of their last sign-in. Cheap, and honest only if the page says so.
Ask the identity provider, which is accurate and specific to the provider the deployment runs.

Decided when

The identity documentation says where the console's answer to "who is an operator" comes from and how current it is, and the people directory shows it on that basis.

Migrated from status/issues.md at b7a0e15

## The question The console's own role exists only in the identity provider's token and is read into the session at sign-in; nothing in the database records who holds it, and the roles that are stored are organization memberships, not console roles. Listing operators in the people directory would be useful, and it cannot be answered from what the console keeps. Where does the answer come from? ## What depends on the answer Whether the console persists what a token said, and how honestly it can label the result. It is the same question for a second console role, so it is settled with the split between an operator and an administrator. ## Options known so far - Record the roles carried by each sign-in against the person, and present the list as of their last sign-in. Cheap, and honest only if the page says so. - Ask the identity provider, which is accurate and specific to the provider the deployment runs. ## Decided when The identity documentation says where the console's answer to "who is an operator" comes from and how current it is, and the people directory shows it on that basis. Migrated from status/issues.md at b7a0e15

cgalo5758 added the

kind

design

area/identity area/operator-ui labels 2026-09-21 07:18:22 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: wiki-cafe/member-console#74