OpenAzExperimentation Experiments with OpenAz API Contains test cases for No PIP: user names and permissions specified directly in the policy With PIP: roles are retrieved from a dummy PIP implementation