nolint:gocognit NewAuthorizer creates a new Authorizer.

Parse parses RBAC data from a reader and creates a new Authorizer.

Group represents a subject that is a group.

Read gives access to read data from a tenant.

User represents a subject that is a user.

Write gives access to write data to a tenant.

Role describes a set of permissions to interact with a tenant.

RoleBinding binds a set of roles to a set of subjects.

Subject represents a subject that has been bound to a role.

Authorizer can authorize a subject's permission for a tenant's resource.

Permission is an Observatorium RBAC permission.

SubjectKind is a kind of Observatorium RBAC subject.