For the OADP, cluster admins need to know: 

• What IAM permissions do you need?
• How do you create them?

In order to support the STS configuration flow using OLM and CCO. 

Background

In interaction with ROSA customers, these operators often come up as foundational to successful adoption of the platform. Having a streamlined process around installing these with integration into STS will enable security-conscious customers to adopt the platform faster.

Customer Considerations

Customers are trained to use the ccoctl tool to carry out IAM changes in conjunction with ROSA. 

Documentation Considerations

Every one of these operators needs to clearly outline with IAM permissions are required and provide easy to follow steps to create them. This information should be visible from the operator's description (part of the OLM metadata) as well as reside in the component's official product documentation.