Hello! I am writing a derived role where I want to store the parentRole (that the user is coming as) into a variable. This will help me simplify and templatize my conditional expressions. Is it currently supported in Cerbos CEL?

There is support for variables in a policy https://docs.cerbos.dev/cerbos/latest/policies/conditions.html#_policy_variables Does this do what you need?

Umm, the variable support in my use case is for derived roles actually 🙂 Looking for a similar construct like that in policy.

You can access the set of roles using

request.principal.roles

You can create variables in any type of file

Interesting, let me try it out, thanks

Yup! there is an example here https://docs.cerbos.dev/cerbos/latest/policies/conditions.html#_policy_variables