Extend current Role Based Access Control

[samip5]

I think the current roles should be extended. :)

[monoxane]

The RBAC implementation is still being worked on but right now it's intended to boil down to
GlobalAdmin -do whatever
ZoneAdmin - create/delete zones
ZoneOperator - assigned a subset of zones to manage, can create records within the zones
ZoneViewer - assigned a subset of zones with read only permissions, useful for help desk or something to see if things are set correctly

I am open for more ideas if you have them

[samip5]

What about API keys with those RBAC permissions in mind?

Would love to be able to give users API they can manage their zones though. :)

[monoxane]

Yeap that's probably a good idea, will probably implement them somewhat like GitHub's PATs where you assign them a zone scope and read/write permission for those zones.