Doc changes for MM-67647 that adds two new roles to manage secure connections by wiggin77 · Pull Request #8752 · mattermost/docs

wiggin77 · 2026-02-18T17:58:58Z

Summary

Adds docs for two new roles added for granular control over Connected Workspaces features:

Shared Channel Manager (shared_channel_manager) — grants the manage_shared_channels permission, allowing assigned users to share and unshare channels with existing secure connections.
Secure Connection Manager (secure_connection_manager) — grants the manage_secure_connections permission, allowing assigned users to create, manage, and remove secure connections to remote servers.

Previously, only System Admins have these permissions, and the only workaround is repurposing the system_manager role (which carries ~80 unrelated sysconsole permissions) OR giving access to all users. These purpose-built roles let admins delegate shared channel and secure connection management to specific users without granting broader system access.

Note To be merged after mattermost/mattermost#35354

Ticket Link

https://mattermost.atlassian.net/browse/MM-67647

…nections (shared channels)

github-actions · 2026-02-18T18:02:20Z

Newest code from mattermost has been published to preview environment for Git SHA fb72d42

github-actions · 2026-02-18T18:29:42Z

Newest code from mattermost has been published to preview environment for Git SHA b44d94d

github-actions · 2026-02-20T05:47:01Z

Newest code from mattermost has been published to preview environment for Git SHA 54e128e

github-actions · 2026-02-20T14:05:38Z

Newest code from mattermost has been published to preview environment for Git SHA afbef28

…for_shared_channels

github-actions · 2026-02-22T16:22:47Z

Newest code from mattermost has been published to preview environment for Git SHA 12d0921

github-actions · 2026-02-22T16:25:28Z

Newest code from mattermost has been published to preview environment for Git SHA 9499fa8

github-actions · 2026-02-28T19:50:34Z

Newest code from mattermost has been published to preview environment for Git SHA d103900

esethna · 2026-03-02T22:33:33Z

source/administration-guide/onboard/advanced-permissions-backend-infrastructure.rst

 | demote_to_guest                              | system  | Demote member users to guests.                                                                                                                                                                        |
 +----------------------------------------------+---------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
-| manage_remote_clusters                       | system  | Add, remove, and view remote clusters for shared channels.                                                                                                                                            |
+| manage_remote_clusters (deprecated)          | system  | Add, remove, and view remote clusters for shared channels. Renamed to ``manage_secure_connections``.                                                                                                  |


Do we need to keep note in the docs for if this is applicable to version x.xx and earlier?

I added server version info for when this was deprecated.

github-actions · 2026-03-02T22:48:20Z

Newest code from mattermost has been published to preview environment for Git SHA bf46359

github-actions · 2026-03-07T02:26:04Z

Newest code from mattermost has been published to preview environment for Git SHA 5d8f499

…tion.

github-actions · 2026-03-07T04:09:18Z

Newest code from mattermost has been published to preview environment for Git SHA 775f9a1

github-actions · 2026-03-11T20:23:32Z

Newest code from mattermost has been published to preview environment for Git SHA 577a1ef

coderabbitai · 2026-03-11T20:24:44Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: a78e66b7-15d0-47e7-ac38-fc9e17548c21

📥 Commits

Reviewing files that changed from the base of the PR and between 577a1ef and 04c03b2.

📒 Files selected for processing (2)

source/administration-guide/onboard/advanced-permissions-backend-infrastructure.rst
source/administration-guide/onboard/delegated-granular-administration.rst

🚧 Files skipped from review as they are similar to previous changes (2)

source/administration-guide/onboard/advanced-permissions-backend-infrastructure.rst
source/administration-guide/onboard/delegated-granular-administration.rst

📝 Walkthrough

Walkthrough

Documentation updates add two delegated administration roles—Shared Channel Manager and Secure Connection Manager—update permission names (deprecating manage_remote_clusters in favour of manage_secure_connections), and propagate role/permission changes across connected-workspaces, delegated administration, and advanced permissions guides.

Changes

Cohort / File(s)	Summary
Permission & Role Definitions `source/administration-guide/onboard/advanced-permissions-backend-infrastructure.rst`	Replaced `manage_remote_clusters` with a deprecated `manage_remote_clusters (deprecated in v5.36)` note; added `manage_shared_channels` and `manage_secure_connections` permissions; updated `system_admin` default permissions to include `manage_secure_connections`; added `system_shared_channel_manager` and `system_secure_connection_manager` builtin roles.
Delegated Administration `source/administration-guide/onboard/delegated-granular-administration.rst`	Added two new delegated admin roles (Shared Channel Manager — `manage_shared_channels`; Secure Connection Manager — `manage_secure_connections`); added rows to permission matrix and mmctl grant/ungrant examples; updated role lists and edited privilege-exception wording to include the new roles.
Connected Workspaces Guidance `source/administration-guide/onboard/connected-workspaces.rst`	Replaced system-admin-only phrasing with explicit delegated-role language (Secure Connection Manager, Shared Channel Manager) across connection creation, invitations, sharing, and management steps; updated notes and examples to reference delegated administration roles and “Authorized users.”

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: adding documentation for two new roles to manage secure connections and shared channels.
Description check	✅ Passed	The description clearly explains the purpose of the changes, detailing the two new roles, their permissions, and the benefits of this delegation approach.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch MM-67647_add_roles_for_shared_channels

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

github-actions · 2026-04-03T15:00:59Z

Newest code from mattermost has been published to preview environment for Git SHA 2bdf125

wiggin77 · 2026-04-03T15:58:04Z

@esethna ok to merge this?

Update secure_connection_manager to system_secure_connection_manager and shared_channel_manager to system_shared_channel_manager in permissions docs and mmctl examples.

github-actions · 2026-04-03T16:25:48Z

Newest code from mattermost has been published to preview environment for Git SHA 04c03b2

Doc changes for MM-67647 that adds two new roles to manage secure con…

fb72d42

…nections (shared channels)

wiggin77 mentioned this pull request Feb 18, 2026

MM-67647 Add roles for shared channels management mattermost/mattermost#35354

Merged

Add more clarity to docs around sysadmin vs secure connections admin

b44d94d

Merge remote-tracking branch 'origin/master' into MM-67647_add_roles_…

12d0921

…for_shared_channels

wiggin77 force-pushed the MM-67647_add_roles_for_shared_channels branch from afbef28 to 12d0921 Compare February 22, 2026 16:19

Fix wording to remove Mattermost from server types we can connect to

9499fa8

Merge branch 'master' into MM-67647_add_roles_for_shared_channels

d103900

esethna requested changes Mar 2, 2026

View reviewed changes

Merge branch 'master' into MM-67647_add_roles_for_shared_channels

bf46359

Merge branch 'master' into MM-67647_add_roles_for_shared_channels

5d8f499

Add server version info for manage_remote_clusters permission depreca…

775f9a1

…tion.

wiggin77 requested a review from esethna March 7, 2026 04:06

Merge branch 'master' into MM-67647_add_roles_for_shared_channels

577a1ef

coderabbitai bot approved these changes Mar 11, 2026

View reviewed changes

Merge branch 'master' into MM-67647_add_roles_for_shared_channels

2bdf125

Rename shared channel roles to use system_ prefix

04c03b2

Update secure_connection_manager to system_secure_connection_manager and shared_channel_manager to system_shared_channel_manager in permissions docs and mmctl examples.

wiggin77 mentioned this pull request Apr 3, 2026

MM-67647: Rename shared_channel_manager roles to follow system_ prefix convention mattermost/mattermost#35944

Merged

esethna approved these changes Apr 6, 2026

View reviewed changes

esethna merged commit 554004e into master Apr 6, 2026
6 checks passed

esethna deleted the MM-67647_add_roles_for_shared_channels branch April 6, 2026 15:20

coderabbitai bot mentioned this pull request Apr 10, 2026

MM-68258 Remove docs for secure_connection_manager role #8875

Open

Conversation

wiggin77 commented Feb 18, 2026 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Ticket Link

Uh oh!

github-actions bot commented Feb 18, 2026

Uh oh!

github-actions bot commented Feb 18, 2026

Uh oh!

github-actions bot commented Feb 20, 2026

Uh oh!

github-actions bot commented Feb 20, 2026

Uh oh!

github-actions bot commented Feb 22, 2026

Uh oh!

github-actions bot commented Feb 22, 2026

Uh oh!

github-actions bot commented Feb 28, 2026

Uh oh!

esethna Mar 2, 2026

Choose a reason for hiding this comment

Uh oh!

wiggin77 Mar 7, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Mar 2, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 7, 2026

Uh oh!

github-actions bot commented Mar 11, 2026

Uh oh!

coderabbitai bot commented Mar 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Uh oh!

github-actions bot commented Apr 3, 2026

Uh oh!

wiggin77 commented Apr 3, 2026

Uh oh!

github-actions bot commented Apr 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

wiggin77 commented Feb 18, 2026 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Mar 11, 2026 •

edited

Loading