Platform & DevOps·Secrets, identity and the supply chain
teams can create their own roles, and none of the roles they create can exceed the ceiling you set.
Permission boundary
Also calledpermissions boundary, maximum permission, guardrail policy
A policy that caps the maximum permissions an identity can ever have, regardless of what is granted to it. It is what makes delegating permission management safe, because it separates 'who may grant' from 'what may be granted'. Without one, giving a team the ability to create roles is equivalent to giving them administrator access, via one extra step.