Managers should be able to add users to a project and give them permissions of 'Task Runner' or lower

[horned1]

Related to

Web-Frontend (what users interact with)

Impact

security improvements

Missing Feature

I would like to be able to give 'manager' roles to a user to handle a project within Semaphore, today he needs 'Owner' permissions to even add a user with low permissions such as 'Task Runner'

Needing 'Owner' for this will lead to 'semaphore-admin' type accounts that are shared, or 'Owner' permissions given to too many users, both are bad from a Security Standpoint

Implementation

Managers should be able to use the 'new team member' function, but the roles presented should be no higher than 'Task Runner' as managers creating other managers is likely not what the 'owner' wants

Design

No response