Feature Requests

I need to DENY user access to the environment linked to our service provider as it will contain information that should only be available to explicit users. Having hundreds of environments makes the CSV import less usable as we will be required to make a group column for each environment, hundreds of columns... Simple group creation options with an explicit deny to an environment. Current groups are auto-created using an allow...

Quick views added to each environment may not be consistent if techs mess up something. Admins can remove per environment, but there is no global option. Adding an option for Global Admins to be able to globally delete quick views across environments would be ideal. Next level would be allowing Global Admins to create quick views as well.

notes/comments for tokens, so we know what its for. either naming each token or having a comment field

Unless I (and my other coworker) are going crazy, Global Readers were able to create reports prior to the group changes. This was a nice to have but I understand that violates the definition of "reader". Would be great to have a checkbox similar to System Integrator that allows me to make a Reader also have "Report Admin" features. Manager provides more permissions than our Client Advisor team needs, they really are just readers that need to be able to create reports as needed

Currently the bulk actions for users only allows you to add environment permissions to user. I would also like to bulk remove permissions from users as currently the only way to remove access is to click into each user. This would make it super simple for user management within the platform.

We have shown off when demoing Liongard the ability to look at eg. the endpoints table and expand 'metrics', toggling off certain datapoints as and when we need them. We have since realised that only those with the admin role have access to this. Ideally, we would like roles below admin to have access to this button. As long as they are just toggling on which metrics are viewable for their user, this could be fine for even the reader role.

I'd like to be assign more granular permissions than the current permission groups allow. I would eventually expect to be able to create custom permission groups and toggle roles or individual permissions on or off for those groups. Ideally I would be able to clone existing groups (similar to cloning actionable alerts or other things in Liongard) so that I'd have a base to start from instead of creating a group completely from scratch.

I want Liongard to provision accounts via the sso connection. AKA: Liongard should use Azure for account provisioning and role delegation. Further, Role delegation should be more granular. I expect that liongard will have DENY attributes on roles. The ability to create custom roles. The ability for Azure to provision accounts and delegate roles.

I'd like to be able to create custom roles for users. It's currently only admin permissions or read-only. It's important to follow the principle of least privilege. I would expect a button that lets me pick and choose individual permissions to delegate specific functions.