It would be great to have a way to automatically generate certain roles. For example, by using AI.
Creating roles is quite a lot of work and something that often results in minor mistakes. Some how it feels kind of strange that there is no way to get some roles for free. Without having to do any work.
I think that it can, and should be, possible to generate certain roles and therefor get these for free. Like get a read only and a management role for each menu entry.
The read only role has access to the subject and all the visible details, but only ready only access.
The management role has access to a subject and all the visible details. This role also has access to all the prefilters, tasks, reports and can insert, edit and delete on all these subjects.
Having these roles available will save up quite some time. Since around 80% of your roles you will need is a management and read only role per menu entry.
This might seem like a lot of work, but it could already be created through the enrichments. And with the coming of a MCP layer that should that simpler to implement.
