chore: allow user admins to configure idp sync

Emyrk · Emyrk · commit 8726ae755d6c · 2024-09-27T11:14:43.000-05:00
diff --git a/coderd/rbac/roles.go b/coderd/rbac/roles.go
@@ -460,6 +460,7 @@ func ReloadBuiltinRoles(opts *RoleOptions) {
 						ResourceOrganizationMember.Type: {policy.ActionCreate, policy.ActionRead, policy.ActionUpdate, policy.ActionDelete},
 						ResourceGroup.Type:              ResourceGroup.AvailableActions(),
 						ResourceGroupMember.Type:        ResourceGroupMember.AvailableActions(),
+						ResourceIdpsyncSettings.Type:    {policy.ActionRead, policy.ActionUpdate},
 					}),
 				},
 				User: []Permission{},
