key-cape/history/2026-09-28-railiance-admin-role.md
tegwick 1164f65d89
All checks were successful
Authentication acceptance / acceptance (push) Successful in 1m13s
Authentication acceptance / provider-contract (push) Successful in 16s
Build and Publish Container Image / build-and-push (push) Successful in 1m12s
Map explicit Railiance admin directory group for alert acknowledgment
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f
2026-09-28 10:48:17 +02:00

718 B

Railiance admin role — 2026-09-28

Implemented under railiance-telemetry RTEL-WP-0002-T04 and explicit Bernd Worsch approval. Directory group railiance-admins now maps to the distinct railiance-admin role and platform tenant. It does not grant platform-operator; existing net-kingdom-admins behavior is preserved. All Go tests pass.

A contained identity-provisioner operation verified that tegwick has the requested notification address and added only that group; other memberships were preserved. Signed claim proof awaits issuer rollout and real login. No credential value was printed, copied to source or returned to the agent. The native directory operation is recorded in telemetry's session evidence.