Add "Global Audit" FusionAuth role

[cliu-rw]

Add "Global Audit" FusionAuth role

Problem

As a security auditor, I need to be able to view the current state of the system while not being able to make any changes.

Solution

Add a "Global Audit" function that can see everything a "Global Admin" can impact, but can't make any changes (in CRUD terms, no CUD, just R).

Alternatives/workarounds

I tried to look at using the various existing reader/audit roles, but they appeared to be incomplete.

Additional context

As security, and separation of duties, becomes more important, functionality such as this becomes necessary.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

How to vote

Please give us a thumbs up or thumbs down as a reaction to help us prioritize this feature. Feel free to comment if you have a particular need or comment on how this feature should work.