Add Application Manager

[phavekes]

Add "Application Manager" Role

Summary

Goal: Create a granular admin role to manage specific applications without granting full institutional access.

Access & Assignment

• Allow only Super-admins and Institution admins to grant this role.
• Update invitation UI to include a mandatory Application Selection dropdown.
• Ensure the role is scoped to one application per invitation.

Permissions (Scoped to assigned Application)

• Role Management: View, Create, Update, and Delete all roles for the application.
• Member Management: Add or remove Role Managers and Inviters for those roles.

Restrictions

• Block management of roles linked to multiple applications unless the user is an Application Manager for all involved apps.
• Restrict access to any application or institutional setting not explicitly assigned.

Developer Checklist

To be completed by the developer during implementation.

• Add required changes and feature flags config files
• Create and document database changes and migrations
• Create and document API changes and migrations
• check for backwards compatibility
• Updated CHANGELOG and other documentation where needed

Testing and QA

Describe how to verify and test this change.

Test Environment and Setup

1. Point to [URL/Branch]
2. Use account with [Role/Permissions]

Test Checklist

• Happy Path: Feature works as intended under normal conditions.
• Edge Case: [Describe specific test item]
• Validation: [Describe specific test item]
• UI/UX: Verified layout across screen sizes.

Extra Information

Lost ook #592 op ?