ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.

Engineering / ENG-1423

People on phone codes can't be administrators

Project: Engineering
Type: Story
Status: Done Done
Priority: Medium
Reporter: Mira Holm <mira.holm@acme-hq.example>
Assignee: Marek Nowak <marek.nowak@acme-hq.example>
Labels: phone-codessecurity
Components: identity-serviceportal
Fix versions: identity-service 2026.05.19portal 4.2
Sprint: Sprint 42
Story points: 2
Parent: ENG-1418 Phone codes for depot workers without email
Created: 6 May 2026, 08:40 UTC
Updated: 19 May 2026, 13:20 UTC
Resolved: 19 May 2026, 13:20 UTC

Description

An administrator can change who may open what for the whole organisation. A code by SMS is not enough for that.

Acceptance criteria

A person whose sign-in is Phone code can't be given the Administrator role, in the portal or through the API.
Giving them the role explains why: administrators sign in with a password and MFA, or with single sign-on.

Comments (0)

No comments.