Goal:

• Define permissions to work with Provisioning
• Define roles withing Workspaces that make sense in context of ConsoleDot
• Try to integrate with an CIAM namely Alec

Acceptance Criteria:

• Allow Customers to allow only some users to Launch instances
• The role can be easily mapped to Customer Bussiness role

Open questions:

• Should we implement intermediary model, or wait for Worspaces to be done withing ConsoleDot
• Shall we have distinct Launch role, or shall we integrate into some HMS common roles?

Resources

• Adrew's demo on his RBAC research:
  • https://drive.google.com/file/d/1jzAm5fg8suLXAkLy9TOHX4iF6MyjwDvh/view
  • https://docs.google.com/document/d/18Vvn2_LUs8Gzs0CNXoByvObyJt81NNNtVzofzM2LLfE/edit