Is there a way within the RBAC model to delegate access based on a criteria like “Environment”? For example, Environment can be Dev, Test, Staging, Prod. Resources are provisioned and tagged / labeled with the appropriate selection to denote what the environment this is for.
How can one assign a user/group to only manage resources that are for Dev? or Stage? or Prod? We do not see any level of granular definition to accomplish this at this lower level.