Add RBAC Support for multi-tenancy?

[vennemp]

Would the project be open to a community contribution that adds role-based access control (RBAC) directly into Powerpipe?

The idea is to let self-hosted users enforce per-user or per-group access to specific dashboards/datasets (e.g., via OIDC claims → roles → permissions). This would make multi-tenant setups easier without relying entirely on external proxies.

Is this something you’d consider in scope, or do you prefer to keep authorization external?

[e-gineer]

Thanks for reaching out and for the suggestion.

Our goal is for the Powerpipe CLI to focus on a great developer / single user experience. We don't consider RBAC to be in that scope.

As you suggest, others have used an authentication layer in front of Powerpipe to serve the multiuser case.