Share Authorization Roles for consortium

Purpose: Consortium managers need to manage system roles at a high level, they need the ability to efficiently manage the creating and updating of roles for and on behalf of members of the system.

User story statement(s):

As an authorized consortium administrator working within the central consortium tenant,
I want to manage authorization roles centrally for the entire system
so that I can more effectively support member tenants in managing the capability of their users and the things they are able to do in the system

Scenarios:

1. Scenarios:

   1. Share to all:

      • Given user has permission Consortium manager: Can share settings to all members

      • AND has selected “Central tenant” member

      • When a role is selected

      • Then action menu contains “Share to all” action

      • AND view/edit forms Display “Centrally managed” keyvalue pair

      • AND if shared value is “Yes”

   2. Share not editable once saved

      • Given user clicks action menu

      • When menu is displayed

      • Then "Share to all" action is NOT displayed

   3. Edit Shared Roles

      • Given user clicks edit on a shared role in the central tenant

      • When user edits and clicks save and close

      • Then changes are pushed to that Role in all tenants

      • BUT User assignment is unique to each tenant

   4. Edit Shared Roles from member tenant

      • When user views shared role in the member tenant

      • Then “Edit” and “Delete” options are not displayed