GitLab

• Users with 2FA via Google Authenticator/TOTP, or signup/login via M365
• Datastore groups - Allow each store to have a Group with a name and description assigned/tagged to it
• Datastore and group permissions - Users must be granted to either Groups or individual Stores (or both)
• Administrator permissions - Use the same RBAC model as with the Roadsmart project, define available permissions and then build custom roles on them. Superadmin config supercedes any role-specifics
• Create MySQL readonly users based on a user's permissions, custom random password, etc. - Allow a user account to have a mysql user created that has read-only access only to the datastores their role has access to with a random long alphanumeric password. Updates to their role, groups, group permissions should give a warning if a mysql user is also configured, then update the access for that user as well.