Map SAML roles to project permissions

[wfjsw]

My SAML IdP returns a set of roles that I usually use to assign permission. Right now, I have it set up so that it creates site teams for each of the role. Next I want to match the teams so they have project permissions based on that. However I find out that:

1. If I give project permission through Manage / Teams, I can only specify one list of project and one set of roles. In that way it is impossible to, for example, give Add suggestion to project A, and give Translate to project B.
2. Inside the project there is another page of Users and Teams, but the teams created through SAML is not available there, and it seems a completely independent set of things. I cannot, for example, assign a site team to a project and keep it updated

Right now I can think of adding every team to every project, and start from there. but that appears to give too much View permission to irrelevant people.

How do you guys usually handle this?

[Maxaubert]

[wfjsw]

Appears to be not very scalable, given now I have to create (number of projects) * (number of roles) many teams, similarly bad in the way they are created within the project. That would easily grow past a few thousand groups. In that case there is going to be problems handling it in Weblate UI itself as there is no search teams feature

[wfjsw]

https://dontpastetheai.com/