Hi Stephane, That's not possible. Plus, do you think we can change this issue to 'Issue Type: Pre-Production' + 'Category: Maintenance'? 'Production Impaired + Access Management' means.. your production is having some serious issues ( not outage ) with 'Access Management'.

>> We don't want to give full acces to the developers. But if we can give a read-only access to the GLUU console, they will can confirme by them selves, an issu with their apps. Makes sense. But if you want anyone to 'access' the oxTrust of Gluu Server ( the GUI where configurations are stated ); there are just two types of users; first: 'Gluu Manager Group' and second: general user who doesn't have access to any admin feature. If you want them to 'SSH' into the Gluu Server box; without being 'root' it's not possible to login into 'Gluu Server container'. I think the best option for you would be to ask them what they want to see and provide that info from your / some other admin account; at least I would do that.

Here is use case which we are planning in our mind. As a Gluu admin I can configure system configuration like (cache refresh, attributes, manage authentication and change custom scripts). This is powerful access which can be done by giving 'Gluu Manager Group'. As a Gluu support person, I should not be able to change any system configuration. But I should be able to create new Open ID client, create new SAML integration, Manager User. We dont have any group for this. I wish I can create group with options (name of the action) to select. Then I can assign the group to user. Is this something in Gluu roadmap?