fix(rbac): make complete built-in RBAC available on Community (#1793)

Open all five built-in global roles and stack/node scoped assignments
on Community. Remove paid fences from user role create/update, scoped
assignment CRUD, permission evaluation, and the Users settings UI.

Admiral continues to own extended audit governance, LDAP directory
integration, and other organizational assurance features. Built-in
scoped RBAC is no longer marketed or enforced as paid-only.
This commit is contained in:
Anso
2026-08-07 23:50:53 -04:00
committed by GitHub
parent e084ad424c
commit 5c52ae26eb
15 changed files with 126 additions and 126 deletions
+4 -4
View File
@@ -186,7 +186,7 @@ See [Licensing & Billing](/features/licensing) for the full walkthrough includin
## Users
<Note>
User management requires an admin role. Community supports unlimited accounts with the Admin and Viewer roles.
User management requires an admin role. Community supports unlimited accounts with the full built-in RBAC system (five roles and scoped assignments).
</Note>
**Scope:** Global
@@ -206,9 +206,9 @@ Create and manage user accounts with role-based access. The masthead publishes a
|------|------|-------------|
| **Admin** | Community | Full access to all features |
| **Viewer** | Community | Read-only access to stacks and nodes |
| **Deployer** | Admiral | Can view stacks and trigger deployments |
| **Node Admin** | Admiral | Full stack and node management, including node-scoped operational Settings |
| **Auditor** | Admiral | Read-only plus audit log access |
| **Deployer** | Community | Can view stacks and trigger deployments |
| **Node Admin** | Community | Full stack and node management, including node-scoped operational Settings |
| **Auditor** | Community | Read-only plus audit log access |
See [RBAC & User Management](/features/rbac) for details on what each role can access.