docs(guide): institution create/delete is BCOS-only; MSP submits a request (msp#29) #20

Merged
hiveiq merged 1 commits from docs/institution-keys-bcos-only into develop 2026-07-15 16:03:12 -04:00

1 Commits

Author SHA1 Message Date
johannes 9cfb085339 docs(guide): institution create/delete is BCOS-only; MSP submits a request (msp#29)
Update the msp.institution-keys module (Customer/Internal/Claude/Testing tabs)
and technical.devices to match the new authz:
- Only BCOS_ADMIN can create/delete institution keys; MSP admins edit only and
  must submit a request to BCOS to add/remove an institution.
- POST/DELETE /api/institution-keys -> hasRole('BCOS_ADMIN'); PUT stays MSP+BCOS.
- Note the underlying ownership gap (devices mints institutions with no mgmt
  mirror; keys have diverged) tracked in msp#29.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-15 15:59:19 -04:00