rbac for ci framework