When customer is creating binding of roles, a group/users to a resource, the UI need to support listing all roles that can be assigned to the resource.

• Currently, all permissions can be applied to either org or workspace. We have to determine which permissions can be applied to which resource.
• And one v2 role might have multiple permissions. They can appear when filtering different resource types.
• Seems no restrictions of applying the wrong role to a resource, e.g., they can select roles reasonable for org when binding to workspace 
• What info the UI will pass to us to filter