Request:

Allow teams to manage their own EEs.

If it was implemented exactly like credential RBAC, we would be fine, so something like:

• Read: User can see the EE and what Hub Image it is tied to
• Use: User may set this EE in a Template or Project (Org Assignment should be limited to org admins imo)
• Admin: User may manage the EE and set the Hub Image / Tag

When Users allow others to execute a Template which has a fixed EE tied to it, and this is being used, our goal would still be reached.

Business Reasoning:

The customer is looking to try out different ways of letting AAP users use EEs and the lack of RBAC for EEs is stopping this.