Originally for the 2.14 tech preview, the requirements for the RBAC console GUI were that Users/Groups must be multi-select as well as manual entry. Manual entry broke due to shared console code changes. We need to fix this, as well as change how User/Group search is currently working:

1. fix the manual entry (custom User/Group manual entry)
2. change User/Group search (that populates drop down menu) from hub cluster to managed cluster (whichever managed cluster is selected by the ClusterPermission)

Regarding #2, we are currently using search to populate the User/Group drop down, but we are looking on the hub cluster which is not correct. In the real world IDP scenario, we should be looking at the managed cluster for users and groups. If a user has previously logged into a managed cluster through IDP, it will create the User and Group objects for that user on that specific managed cluster that they logged into.

jbanerje@redhat.com and jpacker@redhat.com are good resources if help is needed for this.

Slack thread for this discussion: https://redhat-external.slack.com/archives/C08AJ4XMVGB/p1749228807002899