📣 Tag-based access control, custom roles for teams, and custom roles for users are live! If you’ve been using custom roles to secure your CI/CD pipelines, you can now apply them at scale: • Tag-based rules: ◦ Tag a stack (e.g.

sensitivity:critical

) and permissions apply automatically, no manual assignment needed • Team role assignments: ◦ Assign roles to a team; members inherit on join • User role assignments: ◦ Assign custom roles for a user global to the org, used effectively as their “baseline role” Available on Enterprise and Business Critical plans today. Full details in the launch post: https://www.pulumi.com/blog/expanding-pulumi-iam-custom-permissions/ This is something we’ve had in the works for a long time, and we are thrilled to be able to offer this to you today! Would love to hear how you’re using it. Drop questions or feedback here or in GitHub 👉 github.com/pulumi/pulumi-cloud-requests/issues