diff --git a/config/services/activity/kustomization.yaml b/config/services/activity/kustomization.yaml index 729d029c..e84a6c75 100644 --- a/config/services/activity/kustomization.yaml +++ b/config/services/activity/kustomization.yaml @@ -6,5 +6,8 @@ apiVersion: kustomize.config.k8s.io/v1alpha1 kind: Component +resources: + - roles/iam-user-self-manage-audit-log-querier.yaml + components: - policies diff --git a/config/services/activity/roles/iam-user-self-manage-audit-log-querier.yaml b/config/services/activity/roles/iam-user-self-manage-audit-log-querier.yaml new file mode 100644 index 00000000..8b95becb --- /dev/null +++ b/config/services/activity/roles/iam-user-self-manage-audit-log-querier.yaml @@ -0,0 +1,9 @@ +# SPDX-License-Identifier: AGPL-3.0-only + +apiVersion: iam.miloapis.com/v1alpha1 +kind: Role +metadata: + name: iam-user-self-manage +spec: + inheritedRoles: + - name: activity.miloapis.com-audit-log-querier