Support Bot Direct Usage Paradigm With Individual User Grants

[progala]

Environment

• Nautobot version: 1.1.3
• nautobot-plugin-chatops version: 1.5.1

Proposed Functionality

I would be great to improve the way access grants are managed to make the process more scalable. Some of the possible improvements:

• Add access grant groups as containers for user IDs. Then allow groups to be used in the access grant definitions.
• Add some way of automatically mapping chat user names to user names in Nautobot. This would probably require integrations with the likes of AD.

User Story

As Nick the Network Automation Engineer I wish to be able to manage permissions for hundreds of users using chatbot commands. I would like to be able to define groups reflecting my company's organizational units. I would then like to use these groups when defining access grants.

I will know this is done when I can create named user group objects, each containing user IDs, and use these objects in the access grant definitions.

At some point, I would also like to be able to map chat users to the Nautobot users for ease of management and a more uniform experience.

I know this is done where I can use Nautobot user accounts to define access grant groups and the chat users are automatically mapped to the Nautobot user accounts.

[smk4664]

This is going to be scoped for Nautobot-plugin-chatops 2.0. There will be some breaking changes introduced to Access Grants. In 2.0 we will be able to limit queries based on the individual user permissions. This will include:

• Add some way of automatically mapping chat user names to user names in Nautobot. This would probably require integrations with the likes of AD.