Permissions are presented as a flat list of individual permissions, and there are a lot of them. It makes it quite hard and time consuming to set them correctly. This is especially true for eg, an admin user : when I create an app password for my email access, I want it to be limited to a basic user permission.
It’d be much easier if, instead of a flat list, permissions where grouped by categories like (for example)
- IMAP
- Authenticate
- View mailbox access control list
- etc.
- JMAP
- Authenticate
- Email
- Create new mailboxes
- Etc
- Calendar
- Parse raw calendar event data without storing
- Management
- Domain
- etc
When ticking / unticking a parent, it would tick/untick everything under it.
With such a layout, it’d become much easier to setup correct role permissions, and create limited credentials like app passwords or API key