...
- Offers few roles out of the box (user and admin) with prebaked access control for these roles. There is no way to create additional roles with customized permissions.
- Some resources have access control baked into them. E.g., shared networks, projects etc.
- We have to create special dedicate API to grant permissions.
Goal for this feature would be to address these limitations and offer true IAM services in a phased manner
...