Goal:

• Migrate off of the rbac api to the kessel api
• Continue to use organization ids

Acceptance Criteria:

• Use the kessel apis to do rbac checks
• No caching should be needed
• Provide a way to 'turn on' kessel integration instead of rbac, so it can be controlled per environment (stage/prod)
  • both rbac and kessell will exist together

Open questions:

• What does an api client look like?