Cockpit process specific authorization

[simonhir]

As defined when the new sso cockpit was added the authorization should be switched to process specific so that everyone only sees there own processes. The correlating groups were collected in internal issue https://git.muenchen.de/digitalisierung/digiwf-support/-/issues/381

Acceptance criteria

• There are no more * permissions except for the admin group
• Every user can see and work with the correct processes as defined in above issue
• There is a way defined how group changes or new groups can be requested

[simonhir]

As the ui is not very user friendly and partial wildcard is not supported the plan is to write a ansible script to do this which can also be used in the future for ServiceNow automation. Internal repo: https://git.muenchen.de/digitalisierung/digiwf-automation