Enable/disable specific tenant-admin permissions

[slawrencemd]

Hi,

This PIP gives an approximation of the permissions required to do management operations (ex: cluster creation requires superuser access)

Question: Is there a way to selectively disable permissions for tenant admins, so that only the superusers can do them?

Ex: we don't want our tenant-admins to be able to set-clusters for namespaces ; can we block that?

I haven't been able to find much info this area, except for that PIP. This might be a place for some documentation work, which I would be happy to help with...

thanks,
-s

[slawrencemd]

Answering my own: I don't believe this is doable out of the box. A custom authorization implementation might be able to do it instead.

Source is from the StreamNative TGI Pulsar 004 Video (time scoped URL): https://youtu.be/sTISVpyq73o?list=PLqRma1oIkcWhWAhKgImEeRiQi5vMlqTc-&t=1184