Is MAAS RBAC a paid subscription?

[jpjacquez]

Hello,

Knowing that the MAAS RBAC has to use Canonical-Rbac which requires a paid subscription, does this mean that MAAS RBAC is a paid subscription? If it is then could anyone share the pricing page?

I have seen this following link below but its not clear to me if this is the only path to deploy MAAS RBAC like MAAS(client) → Canonical-Rbac(policy server) → Candid(Authentication mediator) → Identity Server

Can I using Role Based Access Control without Canonical-RBAC service?

In this guide, How to get RBAC running - Docs - Canonical MAAS | Discourse it says that if you use canonical-rbac with the appropriate identity provider, candid, you can use the RBAC feature. Is it possible to use Role Based Access Control feature without Canonical-RBAC service, just with keycloak provider and candid? I was wondering if there is a way to authorize MAAS per user in keycloak, or per group in keycloak.

thanks,
Jewsco

[r00ta]

The Canonical RBAC service is an external service to MAAS that extends the functionality of MAAS and provides role-based access control. Written in Python, RBAC is closed source. The private license requires Ubuntu Advantage to be gain access to the private PPA.

You can check the information here https://ubuntu.com/pricing/pro and contact sales through that page in case

[jpjacquez]

thanks @r00ta ,so could you confirm this, I can NOT implement MAAS RBAC without Canonical-Rbac correct?

[r00ta]

Yes, I confirm your understanding is correct

[jpjacquez]

Thanks @r00ta, appreciate your input