Collaborator role with minimum account access but bindable to OIDC providers

[ncbkr]

Use Case

i would like to use Plural OIDC and add users who should have access only to specific applications installed in my cluster. Their access should be limited to using these applications. They should not be able to see any other account information (other users/groups and their projects/rights or any installation details)

Ideas of Implementation

creating some sort of collaborator role that'd get absolute minimum account access, but can still be bound to OIDC providers and such.

Additional Info

---

Message from the maintainers:

Excited about this feature? Give it a 👍. We factor engagement into prioritization.