Fine-Grained Permissions

[kevwilliams]

Datum Cloud now supports full group and role management for organizations.

Here's what's new:

• Groups - Create, update, and delete groups within an organization. Add and remove members.
• Role management - View all roles assigned to an org member (previously only the first role was displayed). Add or remove roles from users and groups, scoped to the organization or a specific project.
• Pending-changes preview - Before saving a role change, the UI shows the effective permissions diff (added/removed) so you know exactly what you're granting before it takes effect.

Role assignments work through the existing PolicyBinding controller - no direct binding management required. All predefined roles are available for assignment; custom role creation is not yet supported.

View datum-cloud/enhancements#630 for more details.

Groups	Roles