[Permissions] Separate the "Permissions - Manage" into two separate "Permissions - View" and "Permissions - Manage"

[ward_michael]

Problem statement:

Please see this post describing the issue: https://community.canvaslms.com/t5/Canvas-Question-Forum/Granting-Admin-Permissions-to-Third-Party-I... The current Account Role permission of "Permissions - Manage" needs to separate the View from the Manage abilities for security reasons if third party integrations need to be able to view Canvas users having account Admin roles but do not need to create/update/delete permissions but only need read-only viewing of the permissions. This also would be helpful so I can assign Permissions - View to our designated college Canvas Campus Admin users. Currently, we only reserve Permissions - Manage for IT Canvas Account Admins only.

Proposed solution:

Separate the Account Role permission of "Permissions - Manage" into "Permissions - View" and "Permissions - Manage" for security best practices.

User role(s):

admin