@@ -228,6 +228,8 @@ var (
228228Identifier : rbac.RoleIdentifier {Name :"autostart" },
229229DisplayName :"Autostart Daemon" ,
230230Site :rbac .Permissions (map [string ][]policy.Action {
231+ rbac .ResourceOrganizationMember .Type : {policy .ActionRead },
232+ rbac .ResourceFile .Type : {policy .ActionRead },// Required to read terraform files
231233rbac .ResourceNotificationMessage .Type : {policy .ActionCreate ,policy .ActionRead },
232234rbac .ResourceSystem .Type : {policy .WildcardSymbol },
233235rbac .ResourceTemplate .Type : {policy .ActionRead ,policy .ActionUpdate },
@@ -443,6 +445,7 @@ var (
443445},
444446// Should be able to add the prebuilds system user as a member to any organization that needs prebuilds.
445447rbac .ResourceOrganizationMember .Type : {
448+ policy .ActionRead ,
446449policy .ActionCreate ,
447450},
448451// Needs to be able to assign roles to the system user in order to make it a member of an organization.
@@ -456,6 +459,10 @@ var (
456459rbac .ResourceOrganization .Type : {
457460policy .ActionRead ,
458461},
462+ // Required to read the terraform files of a template
463+ rbac .ResourceFile .Type : {
464+ policy .ActionRead ,
465+ },
459466}),
460467},
461468}),