Privileges

Privileges with roles

Prior to 3.17.0, privileges could not define roles that hadn't been created yet, as ml-app-deployer would always deploy privileges first and then roles next. Starting in 3.17.0, ml-app-deployer handles this scenario in the following manner:

1. Privileges are deployed, but without any roles if they define any
2. Roles are deployed
3. Any privileges that did define roles are re-deployed

See this example used for testing for an example of this scenario.