RBAC for ProjectCreators

[pvickery-ParamountCommerce]

Hi!

I am setting up Kargo for multiple teams to use to create and manage their own projects. Currently, users can login and create projects, but they do not have the permissions to create resources in the new project.

Here is my inputs to the helm chart:

api:
  host: <kargo-url>
  oidc:
    enabled: true
    issuerURL: <URL>
    clientID: <clientID>
    additionalScopes:
      - groups
      - email
      - openid
      - profile
      - offline_access
    admins:
      claims:
        groups:
        - "Platform Team"
    projectCreators:
      claims:
        groups:
        - "Dev Team A"

I also want the newly created projects to be managed by any user in the same group as the creator, not just the single creator user. Is that possible? The annotations for rbac.kargo.akuity.io/claims and kargo.akuity.io/create-actor both reference the user email so I think only that one user has permissions to manage the new project.