[Feature]: TBAC Support

[shanchunyang0919]

Problem Statement

There is currently no explicit TBAC support for the OSS Identity.

Proposed Solution

Similar or a simplified design of this: https://identity-docs.outshift.com/docs/policies#introducing-task-based-access-control-tbac

Alternatives Considered

No response

Additional Context

No response

Checklist

• I have read the contributing guidelines
• I have verified this does not duplicate an existing feature request