...
So in order to give a user certain permissions these permissions need to be added to a role in CDCM and the token coming from the identity provider must be configured with the correct scope as well as the role key for that role (see image below).
| Info |
|---|
All spaces have the <space-name>.roleAdmin role built in by default. That way the correct roles can be created in a newly created Space. |
| Info |
|---|
This page describes the customization options for the token from the identity provider. |
Managing Roles & Permissions
...