By configuring the following attribute mappings on the IDP side, you can set Shifter roles from the IDP.
- systemrole: A Shifter role applied system-wide. The value can be set to “Administrator,” “Editor,” or “Contributor.”
- userrole: A Shifter role applied on a per-user basis. The value can be set to “Administrator,” “Editor,” or “Contributor.”
If both `systemrole` and `userrole` are configured, `userrole` takes precedence.
If neither is configured, the Shifter “Editor” role is automatically assigned.
Note: Some IDPs do not support configuring custom attributes on a per-user basis.
For the permissions associated with the “Administrator,” “Editor,” and “Contributor” roles, please refer to “Permissions that can be assigned via the team feature”.