Group permissions and present them as a tree

Permissions are presented as a flat list of individual permissions, and there are a lot of them. It makes it quite hard and time consuming to set them correctly. This is especially true for eg, an admin user : when I create an app password for my email access, I want it to be limited to a basic user permission.

It’d be much easier if, instead of a flat list, permissions where grouped by categories like (for example)

  • IMAP
    • Authenticate
    • View mailbox access control list
    • etc.
  • JMAP
    • Authenticate
    • Email
      • Create new mailboxes
      • Etc
    • Calendar
      • Parse raw calendar event data without storing
  • Management
    • Domain
    • etc

When ticking / unticking a parent, it would tick/untick everything under it.

With such a layout, it’d become much easier to setup correct role permissions, and create limited credentials like app passwords or API key

This would be absolutely great! Just spent like 10minutes clicking everything in the “JMAP” category in the small drop-down for app-password permissions!