# Control Center RBAC Configuration Fragment

[[elements]]
border_top = true
border_bottom = false
name = "rbac_section_header"
title = "🔐 RBAC Configuration"
type = "section_header"

[[elements]]
default = true
help = "Enable Role-Based Access Control"
name = "rbac_roles_admin"
nickel_path = ["rbac", "roles", "admin"]
prompt = "Enable Admin Role"
type = "confirm"

[[elements]]
default = true
help = "Enable Operator role for limited administrative access"
name = "rbac_roles_operator"
nickel_path = ["rbac", "roles", "operator"]
prompt = "Enable Operator Role"
type = "confirm"

[[elements]]
default = true
help = "Enable Viewer role for read-only access"
name = "rbac_roles_viewer"
nickel_path = ["rbac", "roles", "viewer"]
prompt = "Enable Viewer Role"
type = "confirm"

[[elements]]
default = false
help = "Allow dynamic role assignment at runtime"
name = "rbac_dynamic_roles"
nickel_path = ["rbac", "dynamic_roles"]
prompt = "Enable Dynamic Roles"
type = "confirm"

[[elements]]
default = "user"
help = "Default role assigned to new users"
name = "rbac_default_role_name"
nickel_path = ["rbac", "default_role"]
options = ["user", "operator", "viewer"]
prompt = "Default Role for New Users"
type = "select"
