Users Cannot Be Assigned to Multiple Roles

Environment

• Observium Version: 26.4.14784
• Operating System: Debian 12
• Web Server: Apache HTTP Server (Apache2) 2.4.66
• PHP Version: 8.2.3

Description

Observium currently does not allow a user to be assigned to more than one role. Each user can only have a single role, which limits flexibility in permission management.

Steps to Reproduce

1. Open the Observium web UI
2. Navigate to User Management
3. choose an  existing user
4. Attempt to assign multiple roles to the user

Actual Behavior

• Only one role can be assigned to a user

Expected Behavior

• Users should be able to belong to multiple roles simultaneously
• Permissions should be combined (union of all assigned roles

Impact

This limitation makes it difficult to:

• Implement flexible access control
• Manage users in complex environments with overlapping responsibilities

Additional Notes

• It is unclear whether this is an intended design limitation or a missing feature
• Many RBAC (Role-Based Access Control) systems support multiple roles per user