Description of the problem:

When using the backstage UI to create a role, the orchestrator plugin only has Resource type "orchestrator.workflow" available - there should also be orchestrator.workflow.use based the permissions doc

If the orchestrator.workflow.use resource is added via policy.csv external file, then it will appear in the backstage ui, but it will not be died to a plugin

How reproducible:

100%

Version:

Orchestrator 1.4 RC 7 & rhdh 1.4.1

(possibly on 1.3 as well, but will need to try it out)