Migrating to the new role-based authorization model

In September 2021, CDP introduced a new role-based authorization model, and deprecated and changed some roles that were part of the old model. The new authorization model discourages the use of the PowerUser role, and removes EnvironmentAdmin and EnvironmentUser roles from the account level, providing lower lever roles instead.

Refer to this document if you need to migrate from the old model to the new model. First we'll go through each role change and what you need to do in order to migrate to the new model, and then we'll go through each resource type and recommend what roles should be assigned to each resource in place of the deprecated roles. Finally, we will present a complex migration scenario.