@ztefanie not sure if we also have to add the possibility to create a user with this role via administration gui or it is sufficient to create it via runConfig and backend command, since we probably will only need one. Please check if there is anything to add in this ticket :)

I think this user should also be able to be created via administration ui, it is not really effort for us to do this.

But in general I think it would be nice, if we move to a clean RBAC structure, i created a ticket for this here: #1626
we can discuss this at a grooming.

@f1sh1918 @ztefanie just for my better understanding, could you please clarify why we decided to add a new role for that?
why not allow tokens to be created by project admin, for example?

@f1sh1918 @ztefanie just for my better understanding, could you please clarify why we decided to add a new role for that? why not allow tokens to be created by project admin, for example?

Because then the project admin would need to somehow send verein360 the api token and this will likely happen in a unsecure way, e.g. via email. But we want to ensure our tokens stay secret. But on the other hand giving an external organization like verein360 the full admin rights to the project also brings risks and is not what we want. Therefore we introduced the new role.

@ztefanie right, makes sense, thanks for the reply!