- Source: GL_InstanceRole, GL_GroupRole
- Destination: GL_Instance, GL_Group
The non-traversable GL_CanCreateGroup edge has two forms:
GL_InstanceRole → GL_Instance — The instance-level Member role is allowed to create top-level groups on the instance. Controlled by the can_create_group flag on the instance and on individual user accounts.
GL_GroupRole → GL_Group — The role grants permission to create subgroups within this group. Owner and Maintainer roles typically have this permission.
graph LR
member("fa:fa-user-tie GL_InstanceRole Member")
instance("fa:fa-building GL_Instance")
ownerRole("fa:fa-user-tie GL_GroupRole myorg/Owner")
group("fa:fa-user-group GL_Group myorg")
member -.->|GL_CanCreateGroup| instance
ownerRole -.->|GL_CanCreateGroup| group