Multiple user categories

[davidfurey]

What problem would this feature solve?

We have more than one category of user, and would like to be able to set default permissions for each category of user. In our use case, some most engineers are given access to a Playground AWS account, but we would like to exclude this access for some users.

Alternative options or solutions

For the moment, we have stopped using the default permissions feature, and are explicitly adding the appropriate default permissions to every user when constructing the ACL.