Currently, there's nothing stopping a Silo Admin from editing their own permissions and downgrading their role to something other than admin. Because only Silo Admins can modify permissions this means they could end up putting themselves in a state where they're a silo viewer (or whatever) and then can't restore their admin role. Although we aren't going to add a restriction to the API, we can add some friction to the Console UI.
There's a bit of complexity with the fact that someone could be a Silo Admin because of a group assignment, but the simplest bit of friction would just add a confirmation when a Silo Admin is affecting their own account and are changing the role to something other than Admin.
Currently, there's nothing stopping a Silo Admin from editing their own permissions and downgrading their role to something other than
admin. Because only Silo Admins can modify permissions this means they could end up putting themselves in a state where they're a silo viewer (or whatever) and then can't restore their admin role. Although we aren't going to add a restriction to the API, we can add some friction to the Console UI.There's a bit of complexity with the fact that someone could be a Silo Admin because of a group assignment, but the simplest bit of friction would just add a confirmation when a Silo Admin is affecting their own account and are changing the role to something other than Admin.