Private Channel Team Admin Permission Boundary in Mattermost
0 reputation · 29 Aug 2022, 03:56 UTC
Mattermost private channels restrict membership to invited users and System Admins, leaving Team Admins unable to view or moderate content within their own team without an explicit invitation. In environments where team-level oversight or compliance review is required, this creates a gap between delegated team management and channel-level visibility.
The documented role model separates global system authority from team-scoped administration, but the exact boundary for private channel oversight remains unclear. Behavior may differ between the open-source Team Edition and Enterprise Edition, and permission updates might not immediately reflect in active WebSocket sessions.
The following questions remain unresolved:
- Is there a supported configuration that grants Team Admins read-only or audit access to private channels within their assigned team without converting them to System Admins?
- If no such configuration exists in the Team Edition, does the Enterprise Edition expose a granular permission for team-level private channel oversight?
- When a System Admin adds a Team Admin to a private channel, how quickly does that membership propagate to existing WebSocket-connected clients?