apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-rbac-cm  
data:
  policy.default: role:readonly
  policy.csv: |
    p, role:org-admin, applications, *, */*, allow
    p, role:org-admin, clusters, get, *, allow
    p, role:org-admin, clusters, update, *, allow
    p, role:org-admin, repositories, get, *, allow
    p, role:org-admin, repositories, create, *, allow
    p, role:org-admin, repositories, update, *, allow
    p, role:org-admin, repositories, delete, *, allow
    p, role:org-admin, projects, get, *, allow
    p, role:org-admin, projects, create, *, allow
    p, role:org-admin, projects, update, *, allow
    p, role:org-admin, projects, default, *, allow

    p, role:org-developer, applications, get, */*, allow
    p, role:org-developer, clusters, get, *, allow
    p, role:org-developer, repositories, get, *, allow
    p, role:org-developer, projects, create, *, allow

    g, biosimulations:biosimulations-software, role:org-developer
    g, biosimulations:Biosimulations-Deployments, role:org-admin
