Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage.

Cerbos Community

when writing a policy, i see <https://docs.cerbos.dev/cerbos/latest/policies/conditions.html> has handy shortcuts to special variables like P, R, V, G. is there a way to get the derivedRole of a user in a principal policy?

something like `- expr: P.derivedRole == "xxxx"`

i came to the same conclusion because principal policies is supposed to override everything. so a derivedRole doesn't make sense anymore because it will be overridden.