Implement CoreRole Authorizer (#112401)

pkg/services/authz/rbac/mapper.go

@@ -193,7 +193,17 @@ func NewMapperRegistry() MapperRegistry {
 			// Teams is a special case. We translate user permissions from id to uid based.
 			"teams": newResourceTranslation("teams", "uid", false, true),
 			// No need to skip scope on create for roles because we translate `permissions:type:delegate` to `roles:*``
-			"coreroles": newResourceTranslation("roles", "uid", false, false),
+			"coreroles": translation{
+				resource:  "roles",
+				attribute: "uid",
+				verbMapping: map[string]string{
+					utils.VerbGet:   "roles:read",
+					utils.VerbList:  "roles:read",
+					utils.VerbWatch: "roles:read",
+				},
+				folderSupport:     false,
+				skipScopeOnCreate: false,
+			},
 			"roles": translation{
 				resource:  "roles",
 				attribute: "uid",