@TheresNoTime https://meta.wikimedia.org/wiki/Talk:IP_Editing:_Privacy_Enhancement_and_Abuse_Mitigation/Archives/2021-11#What_about_global_rights_holder

Hmm, we could start a new task to discuss about Global Rollbackers.

Hang tight, I'm checking with Legal about this!

In T309318#7962140, @Niharika wrote:

Hang tight, I'm checking with Legal about this!

Can you please also ask about global rollbackers and other global groups?

In T309318#7962271, @DannyS712 wrote:

In T309318#7962140, @Niharika wrote:

Hang tight, I'm checking with Legal about this!

Can you please also ask about global rollbackers and other global groups?

Yes, could you tell me which other global groups would need this access? stewards, staff and ombuds groups already have this access.

In T309318#7962273, @Niharika wrote:

In T309318#7962271, @DannyS712 wrote:

In T309318#7962140, @Niharika wrote:

Hang tight, I'm checking with Legal about this!

Can you please also ask about global rollbackers and other global groups?

Yes, could you tell me which other global groups would need this access? stewards, staff and ombuds groups already have this access.

I imagine this would also be helpful for abuse filter helpers and maintainers (see the ip address when debugging edit filters that use ips), system administrators, global rollbackers, and maybe global interface editors (since they are trusted with so much more including editing site wide js/css)

In T309318#7962274, @DannyS712 wrote:

In T309318#7962273, @Niharika wrote:

In T309318#7962271, @DannyS712 wrote:

In T309318#7962140, @Niharika wrote:

Hang tight, I'm checking with Legal about this!

Can you please also ask about global rollbackers and other global groups?

Yes, could you tell me which other global groups would need this access? stewards, staff and ombuds groups already have this access.

I imagine this would also be helpful for abuse filter helpers and maintainers (see the ip address when debugging edit filters that use ips), system administrators, global rollbackers, and maybe global interface editors (since they are trusted with so much more including editing site wide js/css)

Thanks @DannyS712. I've updated my request for the Legal team.

For reference: T309411: sysop access to ipinfo logs can leak IP addresses that sysops should not have access to

ipinfo-view-log seems limited for those with CU-log access per T307164. Given that global sysops/rollbackers do not sign any NDA, maybe this should not be added unless Legal thinks otherwise. Strike per rOMWC9886463a1fba: Add IPInfo viewing rights for certain groups; sysops have it too but it looks like this is not intended per T307164#7963866.

ipinfo-view-full is probably okay considering that it's a sysop level permission and they have sysop permissions on the several wikis that allow them.