unkinben
7610627168
Bring LiteLLM into the two-tier RBAC and map groups to LiteLLM roles. - akP-litellm-admin / akP-litellm-user permission groups (bound to the litellm app for access); added to akR-global-admin / akR-standard-user roles. - Generic per-provider role_mappings: emit an app role claim computed from effective (hierarchical) group membership. LiteLLM: emits `litellm_role` (proxy_admin for akP-litellm-admin, internal_user for akP-litellm-user, else internal_user_view_only); LiteLLM reads it via GENERIC_USER_ROLE_ATTRIBUTE. Validated: plan 5 to add, 3 to change; generated role expression renders correctly.
4 lines
168 B
YAML
4 lines
168 B
YAML
# Permission group akP-litellm-admin (name = filename). Grants admin
|
|
# access to litellm: bound to the litellm application and mapped to its role.
|
|
application: litellm
|