Problem type
Privilege escalation
privilege-escalation
What it means
A workspace member (a tenant_member token) handing out or acting on permissions they do not hold: creating, changing or deleting such a role, assigning it, or suspending, removing or re-roling a member who holds it. Changing one's own membership, other than leaving, is refused the same way. Console users and API keys are exempt.
What to do
Only grant permissions you hold, or have someone who holds them make the change.