On 2020-10-21 13:06:22 +0000 (+0000), Jeremy Stanley wrote:
On 2020-10-20 22:50:42 -0400 (-0400), Mohammed Naser wrote: [...]
There is no need for us to have anyone with admin powers to Gerrit at all times, we've done enough automation to sustain us and a manual 'circuit breaker' of adding a user *IF* necessary should be put in place.
Yes, we've discussed this already in the past. Our use of OpenID makes it harder to switch between different Gerrit accounts with the WebUI (though maybe less so now that browser containers are a thing). But also, alternative accounts with no OpenIDs at all could be used to perform routine administrative tasks like adding initial users to new groups. It's certainly looking like a compelling option. [...]
An implementation for this is up for review, if anyone's interested in taking a look: https://review.opendev.org/760051 -- Jeremy Stanley