dashboard admin(groups/users) implementation and integrating with dynamic application config

config/opensearch_dashboards.yml

@@ -290,3 +290,8 @@
 
 # Set the value to true to enable workspace feature
 # workspace.enabled: false
+
+# Set the backend roles in groups or users, whoever has the backend roles or exactly match the user ids defined in this config will be regard as dashboard admin.
+# Dashboard admin will have the access to all the workspaces and objects inside OpenSearch Dashboards.
+# workspace.dashboardAdmin.groups: ["dashboard_admin"]
+# workspace.dashboardAdmin.users: ["dashboard_admin"]

src/plugins/workspace/config.ts

@@ -10,6 +10,14 @@ export const configSchema = schema.object({
   permission: schema.object({
     enabled: schema.boolean({ defaultValue: true }),
   }),
+  dashboardAdmin: schema.object({
+    groups: schema.arrayOf(schema.string(), {
+      defaultValue: [],
+    }),
+    users: schema.arrayOf(schema.string(), {
+      defaultValue: [],
+    }),
+  }),
 });
 
 export type WorkspacePluginConfigType = TypeOf<typeof configSchema>;

src/plugins/workspace/server/plugin.ts

@@ -81,7 +81,8 @@ export class WorkspacePlugin implements Plugin<{}, {}> {
       this.permissionControl = new SavedObjectsPermissionControl(this.logger);
 
       this.workspaceSavedObjectsClientWrapper = new WorkspaceSavedObjectsClientWrapper(
-        this.permissionControl
+        this.permissionControl,
+        { config$: this.config$ }
       );
 
       core.savedObjects.addClientWrapper(