Request:

• Customers that are assigned the ability to manage subscriptions in consoledot are provided with wide permissions.
• Customer have requested that this be able to be restricted further, so that subscription management RBAC could be filtered by a list of contract numbers or a list of SKUs.

Why?

• Many customers have separate internal responsibilities for system management and need the ability to restrict this in consoledot.
• For example, there may be a purchasing agent that handles the subscription acquisition, but the actual subscriptions are used in manifests by individual teams and system administrators. While the purchasing agent shouldn't need to create the manifests, this kind of filtering would allow multiple teams internally to make their subscription management self service.

This matters significantly when dealing with disconnected systems, as well as with AAP subs that actually limit the number of nodes that may be managed.