when writing a policy, i see <https://docs.cerbos....
# help
when writing a policy, i see https://docs.cerbos.dev/cerbos/latest/policies/conditions.html has handy shortcuts to special variables like P, R, V, G. is there a way to get the derivedRole of a user in a principal policy?
something like
- expr: P.derivedRole == "xxxx"
It is not possible to get it
i came to the same conclusion because principal policies is supposed to override everything. so a derivedRole doesn't make sense anymore because it will be overridden.