User permission management

[sanverAAB]

Hi All,

I am using dependency track v4.13.3 installed via docker compose.
My plan is to provide it to end users (part of teams), so that they can start using it in isolation.

Right now I am only admin, whenever there is a request comes for onboarding I create a Team first and then assign permissions to it so that user can start using dependency track.

Below mentioned permissions i assign to each team.

• users will be able to login and access DT --> VIEW_PORTFOLIO
• create project permission -> PORTFOLIO_MANAGEMENT
• upload BOM permission --> BOM_UPLOAD
• Create project at BOM upload time --> PROJECT_CREATION_UPLOAD

But with these permission, users of the team won't be able to manage or create the API keys of their team for external integration. Only from admin account i can create token for teams.

I tried to include the 'ACCESS_MANAGEMENT' permission to the team, but this is also not helping.

My main goal is to provide the Team members to create and manage their own API token for their specific team.

Please let me know if this is possible, if yes then how can i do that ?

Regards