ABAC and Custom roles to users & Team Launch by arunkumar611 · Pull Request #17598 · pulumi/docs

arunkumar611 · 2026-02-19T00:04:37Z

Related issues

Fixes https://github.com/pulumi/pulumi-service/issues/37859

claude · 2026-02-19T00:08:49Z

Documentation Review

Critical Issue

Unfished placeholder (content/blog/expanding-pulumi-iam-custom-permissions/index.md, line 77):

**<span style="color:red">Placeholder: add a video on Custom Roles</span>**

This raw HTML placeholder will render visibly in the published post with red text. It must be removed or replaced with actual content before merging.

Heading Case

Per the repository style guide, H2+ headings must use sentence case. The following headings need correction:

Line 31: ## What's New? → ## What's new?
Line 53: ## How to Get Started → ## How to get started
Line 79: ## Automate Governance with Pulumi Policy → ## Automate governance with Pulumi Policy
Line 148: ## Learn More → ## Learn more

Incomplete Code Examples

Both code blocks are missing import statements, making them incomplete as written.

TypeScript (line 89) — add at the top of the block:

import { PolicyPack } from "@pulumi/policy";

new PolicyPack("required-tags", {

Python (line 109) — add at the top of the block:

from pulumi_policy import EnforcementLevel, PolicyPack, ResourceValidationPolicy

def require_tags(args, report_violation):

Pricing Page Links to Blog Post

In content/pricing/_index.md, the two new entries link to the blog post URL:

- title: Tag-based access control
  link: /blog/expanding-pulumi-iam-custom-permissions/
- title: Assign custom roles to users and teams
  link: /blog/expanding-pulumi-iam-custom-permissions/

Blog posts are historical documents and not ideal targets for pricing table feature links. If stable documentation pages exist for these features (e.g., /docs/administration/access-identity/rbac/), those should be used instead. If docs don't exist yet, consider adding them before linking from the pricing page.

Minor

Line 21: "Today, we're excited to announce" is generic filler. Consider a more direct opening.
Line 140: "Tag-Based Access Control, Team Role Assignments, and User Role Assignments" uses title case in body text. Unless these are registered product names, prefer sentence case: "tag-based access control, team role assignments, and user role assignments."

Mention @claude if you'd like a follow-up review after changes are made.

pulumi-bot · 2026-02-19T00:12:26Z

Your site preview for commit 1be7064 is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-17598-1be70644.s3-website.us-west-2.amazonaws.com.

djgrove

looking good!

pulumi-bot · 2026-02-24T19:14:50Z

Your site preview for commit ed0fb57 is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-17598-ed0fb574.s3-website.us-west-2.amazonaws.com.

pulumi-bot · 2026-02-24T20:34:09Z

Your site preview for commit b5aaf64 is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-17598-b5aaf641.s3-website.us-west-2.amazonaws.com.

pulumi-bot · 2026-02-24T23:01:43Z

Your site preview for commit ede8af6 is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-17598-ede8af6b.s3-website.us-west-2.amazonaws.com.

Copilot · 2026-02-27T22:50:11Z

@djgrove I've opened a new pull request, #17725, to work on those changes. Once the pull request is ready, I'll request review from you.

* Initial plan * Update blog post date to 2026-03-09 (one week later) Co-authored-by: djgrove <12940616+djgrove@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: djgrove <12940616+djgrove@users.noreply.github.com>

pulumi-bot · 2026-02-27T23:01:06Z

Your site preview for commit 357c52c is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-17598-357c52c2.s3-website.us-west-2.amazonaws.com.

pulumi-bot · 2026-03-07T02:18:10Z

Your site preview for commit 1c56fcb is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-17598-1c56fcba.s3-website.us-west-2.amazonaws.com.

djgrove

Holding for now--need to adjust date since we had an incident over the weekend.

pulumi-bot · 2026-03-19T00:17:28Z

Your site preview for commit 3fedbc9 is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-17598-3fedbc92.s3-website.us-west-2.amazonaws.com.

Add generated feature and meta images, include the demo video, update the publish date to 2026-03-18, and tighten the post to reduce repetition and fix heading case. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

pulumi-bot · 2026-03-19T00:44:17Z

Your site preview for commit bace18a is ready! 🎉

http://www-testing-pulumi-docs-origin-pr-17598-bace18a8.s3-website.us-west-2.amazonaws.com.

djgrove · 2026-03-19T17:02:13Z

+---
+title: "Pulumi IAM Expands: Manage Access at Scale with Tags, Roles, and Teams"
+allow_long_title: true
+date: 2026-03-18T00:00:00-08:00


@copilot update this date to today at 10:30AM PDT

Copilot · 2026-03-19T17:02:23Z

@djgrove I've opened a new pull request, #18063, to work on those changes. Once the pull request is ready, I'll request review from you.

* Initial plan * Update blog post date to 2026-03-19 at 10:30AM PDT Co-authored-by: djgrove <12940616+djgrove@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: djgrove <12940616+djgrove@users.noreply.github.com>

first commit

1be7064

arunkumar611 requested review from AnuiDolphin, caseyyh, davidemassarenti-optio3 and djgrove February 19, 2026 00:04

arunkumar611 temporarily deployed to testing February 19, 2026 00:04 — with GitHub Actions Inactive

arunkumar611 requested a review from zacdirect February 19, 2026 00:04

djgrove reviewed Feb 19, 2026

View reviewed changes

fixing policy examples, and incorporating suggestions from review

ed0fb57

arunkumar611 temporarily deployed to testing February 24, 2026 19:06 — with GitHub Actions Inactive

updating policy example

b5aaf64

arunkumar611 temporarily deployed to testing February 24, 2026 20:26 — with GitHub Actions Inactive

tyler-dunkel reviewed Feb 24, 2026

View reviewed changes

Comment thread content/blog/expanding-pulumi-iam-custom-permissions/index.md Outdated

tyler-dunkel reviewed Feb 24, 2026

View reviewed changes

Comment thread content/blog/expanding-pulumi-iam-custom-permissions/index.md

updating policy section to point to docs

ede8af6

arunkumar611 temporarily deployed to testing February 24, 2026 22:54 — with GitHub Actions Inactive

djgrove reviewed Feb 27, 2026

View reviewed changes

Comment thread content/blog/expanding-pulumi-iam-custom-permissions/index.md Outdated

Copilot AI mentioned this pull request Feb 27, 2026

Update blog post publish date to 2026-03-09 #17725

Merged

djgrove temporarily deployed to testing February 27, 2026 22:53 — with GitHub Actions Inactive

djgrove approved these changes Mar 6, 2026

View reviewed changes

updating video

1c56fcb

arunkumar611 temporarily deployed to testing March 7, 2026 02:08 — with GitHub Actions Inactive

djgrove requested changes Mar 9, 2026

View reviewed changes

cnunciato reviewed Mar 18, 2026

View reviewed changes

Comment thread content/blog/expanding-pulumi-iam-custom-permissions/index.md Outdated

cnunciato temporarily deployed to testing March 19, 2026 00:08 — with GitHub Actions Inactive

cnunciato force-pushed the authz-abac-launch branch from 3fedbc9 to bace18a Compare March 19, 2026 00:33

cnunciato temporarily deployed to testing March 19, 2026 00:33 — with GitHub Actions Inactive

cnunciato approved these changes Mar 19, 2026

View reviewed changes

djgrove approved these changes Mar 19, 2026

View reviewed changes

djgrove reviewed Mar 19, 2026

View reviewed changes

Copilot AI mentioned this pull request Mar 19, 2026

Update blog post date to 2026-03-19 at 10:30AM PDT #18063

Merged

CamSoper temporarily deployed to testing March 19, 2026 17:14 — with GitHub Actions Inactive

djgrove merged commit ed109cb into master Mar 19, 2026
8 checks passed

djgrove deleted the authz-abac-launch branch March 19, 2026 17:29

djgrove temporarily deployed to testing March 19, 2026 17:29 — with GitHub Actions Inactive

djgrove mentioned this pull request Mar 31, 2026

Fine Grained RBAC Controls for Users/Teams pulumi/pulumi-cloud-requests#122

Closed

Conversation

arunkumar611 commented Feb 19, 2026 • edited by djgrove Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Related issues

Uh oh!

claude Bot commented Feb 19, 2026

Documentation Review

Critical Issue

Heading Case

Incomplete Code Examples

Pricing Page Links to Blog Post

Minor

Uh oh!

pulumi-bot commented Feb 19, 2026

Uh oh!

djgrove left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

pulumi-bot commented Feb 24, 2026

Uh oh!

pulumi-bot commented Feb 24, 2026

Uh oh!

Uh oh!

Uh oh!

pulumi-bot commented Feb 24, 2026

Uh oh!

Uh oh!

Copilot AI commented Feb 27, 2026

Uh oh!

pulumi-bot commented Feb 27, 2026

Uh oh!

pulumi-bot commented Mar 7, 2026

Uh oh!

djgrove left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

pulumi-bot commented Mar 19, 2026

Uh oh!

pulumi-bot commented Mar 19, 2026

Uh oh!

djgrove Mar 19, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI commented Mar 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

arunkumar611 commented Feb 19, 2026 •

edited by djgrove

Loading