Using the OAM to describe resources, how do we implement platform-level authority management

[CoderPoet]

Using the OAM to describe resources, how do we implement platform-level authority management?

Previously, we set the Role, bound the corresponding resource, and then bound it to the user through RoleBinding. But now the user is operating on the Component and AppConfig resources, and then the operator is operating on the resources, and the OPERATOR's SA has permissions on those resources, equivalent to all OAM users having permissions on those resources.

[prasek]

/cc @ryanzhang-oss @artursouza @negz

[ryanzhang-oss]

OPERATOR's SA has permissions on those resources, equivalent to all OAM users having permissions on those resources.

I wonder if you have a more specific example on what is an "OAM user" vs "OPERATOR's SA"?