SPIKE: Testing authorization with Next Auth

[austin-hall-skylight]

What needs to be done

Test out using roles in Next Auth to control access to the eCR Library.

Why it needs to be done

We will need to define roles to control who can see the library and also who can see what eCR's. This is the initial proof of concept for that work.

Timebox

How much time should be dedicated to this spike?

To-do list

Choose one:

• Create a role in Keycloak and assign it to a user or group
• Create a role in Azure AD and assign it to a user or group

Then

• Use a role created in Keycloak or Azure AD to control access to the eCR Library

[emmastephenson]

Will need to work with DevOps to get access to the Skylight Azure env and set up AD user groups.