Allow Create/Edit Entries Without Delete Permission in Devolutions Hub Business

Hello Devolutions Team and Community,

I would like to submit a feature request related to permission granularity in Devolutions Hub Business, specifically regarding segregation of duties for credential management.

Use case
In our environment, we need a group of users who are allowed to:

• Create entries
• Edit existing entries
• View passwords and sensitive data
• Manage attachments and documentation
• Edit VPN / Tunnel / Gateway configurations

However, these users must not be able to delete entries.

This is a very common requirement for environments with:

• Segregation of duties
• Audit and compliance controls
• Change management policies
• Credential lifecycle governance

Current behavior
We understand and confirm that:

• Entries inherit permissions from the vault (and optionally folder/entry overrides), regardless of who created the entry.
• Vault-level custom permissions allow granular control.

However:

• There is currently no built-in role in Hub Business that allows Add + Edit while fully preventing Delete in a clear and enforceable way.
• The closest role, Privileged Operators, grants delete permissions, which is not acceptable for this scenario.
• Relying on complex inheritance combinations makes the permission model harder to audit and reason about.

Feature request
Introduce a dedicated role or explicit permission model that allows:

• Create and edit entries
• Full read access to credentials and sensitive fields
• Explicit and guaranteed prevention of entry deletion

This could be implemented as:

• A new built-in role, or
• A more explicit separation between Edit and Delete actions with strict enforcement

Business value
This enhancement would:

• Improve security posture
• Simplify permission audits
• Support compliance frameworks (ISO 27001, SOC 2, etc.)
• Reduce the risk of accidental or unauthorized deletions

Thank you for considering this request. I believe this feature would benefit many organizations using Devolutions Hub Business in regulated or enterprise environments.

Best regards,

Edson Eduardo Caetano Junior
NOC, IT & Infrastructure Projects Manager