Cloud PDP doesn't support ABAC (cloud_pdp_not_supporting_abac)
Fix a cloud_pdp_not_supporting_abac decision by sending permission checks for an environment with ABAC user sets or resource sets to a container PDP.
No matching resource sets (no_matching_resourcesets)
Fix a no_matching_resourcesets decision, where the resource's attributes don't meet the conditions of any ABAC resource set.
No ABAC rule grants the permission (no_matching_rules)
Fix a no_matching_rules decision, where the user matches a user set and the resource matches a resource set, but no ABAC rule grants the action.
No matching user sets (no_matching_usersets)
Fix a no_matching_usersets decision, where the user's attributes don't meet the conditions of any ABAC user set.
No role grants the permission (no_permission)
Fix a no_permission decision, where the user has roles in the tenant but none of those roles grants the checked action on the resource type.
No roles for the user in this tenant (no_role_in_tenant)
Fix a no_role_in_tenant decision, where the user has roles in other tenants but no role in the tenant of the permission check.
Action not defined on the resource (no_such_action)
Fix a no_such_action decision, where the action in the permission check isn't defined on the resource type.
Resource type not defined (no_such_resource)
Fix a no_such_resource decision, where the resource type in the permission check doesn't exist in the environment.
Tenant not found (no_such_tenant)
Fix a no_such_tenant decision, where the tenant in the permission check doesn't exist in the environment.
No roles for the user (no_user_roles)
Fix a no_user_roles decision, where the user is synced to Permit but has no role assignment in any tenant.
User not synced (user_not_synced)
Fix a user_not_synced decision, where the user key in the permission check doesn't match any user synced to Permit.