Summary

An enterprise client—with a robust set of custom roles—has asked if the session timeout can be configured differently per-role. Their immediate, primary goal is to allow site admins to have a longer timeout, and they would be okay with separate configuration for only that role, if it's the lowest effort.

Acceptance criteria assume the easiest effort is per-role configuration for session handling collection of settings (timeout and timeout warning), though for this client, timeout is the key setting. 

Role(s)

• Site administrator

Acceptance criteria

• As a site admin, I want to configure session handling settings (timeout and timeout warning) per system role, so the system applies longer or shorter "idle time" to particular users.