We need to provide our customers a simple way to get to a cluster that is ready to run virtualization. This means that the cluster is properly installed and that other important components, like storage, networks (including nmstate operator), HA (NHC + FAR/SNR/something else?)  etc. are also installed and ready to be consumed by VMs.

Do we also need to create new RBAC roles / groups that are specific for Virtualization?

This needs to be opinionated but still provide customers to do things there way if they like.