Under Project Setting > Security, I have a group for users with exceptional rights. What I mean by “exceptional” is that there might be a developer from a different team accessing another team’s repository temporarily with read-only to check certain stuff for a limited time.

However, sometimes it gets forgotten why this particular user was given this exceptional right. Was it a mistake? Do they still need it? Why they were given access in the first place?

I would love to note this down somewhere on the dashboard in Security > Members > user.name so that each user can have a custom description/explanation on the dashboard.

Currently I solve this issue by maintaining a seperate excel sheet wich was generated a while ago but it is a bottleneck to maintain it.