Is the Cloud RBAC granularity at the tenant level? I.e. I’d like to have everyone be a reader, but some users to only be able to “write” some flows but not others. Separately, I’d also like to have “per-team” agents and some way to limit which agents can a user submit flows to. Am I better sticking to just separate tenants/separate servers for on-prem deployment, than considering the RBAC for this? Is

workspace

the 2.0 cloud analogue to the 1.0 tenant?

all of those questions can be answered if you contact sales@prefect.io

Workspace is analogous to 1.0 tenants, but it’s also vastly different with permissioning so yes that sales would be the best resource