#704 Feature Request: Create additional permissions so access will be more granular Issue created by javuto ### Current state The access model in

osctrl

, which affects

osctrl-admin

and

osctrl-api

, does have the following permissions: • Global admin: Provides access to administrative actions in all environments within

osctrl

and all operations within an environment (read, query, carve, admin) • Environment read: Provides limited read access within an environment • Environment query: Provides on-demand query access for all nodes enrolled in an environment • Environment carve: Provides file carving access for all nodes enrolled in an environment • Environment admin: Provides access to all the environment operations (read, query, carve) and some environment specific management operations. ### Proposed change Add additional permissions that can increase the granularity of the access. For example, within environment query, a limited query access can allow only to access certain saved queries instead of any query to any enrolled node. ### Impact Better access management but given the current compartmentalization, it should not be too complex to implement. jmpsec/osctrl