feat(coderd): add endpoint to list provisioner jobs (#16029)

Closes #15190
Updates #15084

coderd/rbac/object_gen.go

@@ -214,6 +214,13 @@ var (
 		Type: "provisioner_daemon",
 	}
 
+	// ResourceProvisionerJobs
+	// Valid Actions
+	//  - "ActionRead" :: read provisioner jobs
+	ResourceProvisionerJobs = Object{
+		Type: "provisioner_jobs",
+	}
+
 	// ResourceProvisionerKeys
 	// Valid Actions
 	//  - "ActionCreate" :: create a provisioner key
@@ -338,6 +345,7 @@ func AllResources() []Objecter {
 		ResourceOrganization,
 		ResourceOrganizationMember,
 		ResourceProvisionerDaemon,
+		ResourceProvisionerJobs,
 		ResourceProvisionerKeys,
 		ResourceReplicas,
 		ResourceSystem,

coderd/rbac/policy/policy.go

@@ -169,6 +169,11 @@ var RBACPermissions = map[string]PermissionDefinition{
 			ActionDelete: actDef("delete a provisioner daemon"),
 		},
 	},
+	"provisioner_jobs": {
+		Actions: map[Action]ActionDefinition{
+			ActionRead: actDef("read provisioner jobs"),
+		},
+	},
 	"provisioner_keys": {
 		Actions: map[Action]ActionDefinition{
 			ActionCreate: actDef("create a provisioner key"),

coderd/rbac/roles.go

@@ -483,6 +483,7 @@ func ReloadBuiltinRoles(opts *RoleOptions) {
 						ResourceOrganizationMember.Type: {policy.ActionRead},
 						ResourceGroup.Type:              {policy.ActionRead},
 						ResourceGroupMember.Type:        {policy.ActionRead},
+						ResourceProvisionerJobs.Type:    {policy.ActionRead},
 					}),
 				},
 				User: []Permission{},

coderd/rbac/roles_test.go

@@ -564,6 +564,15 @@ func TestRolePermissions(t *testing.T) {
 				false: {setOtherOrg, memberMe, orgMemberMe, userAdmin, templateAdmin, orgTemplateAdmin, orgUserAdmin, orgAuditor},
 			},
 		},
+		{
+			Name:     "ProvisionerJobs",
+			Actions:  []policy.Action{policy.ActionRead},
+			Resource: rbac.ResourceProvisionerJobs.InOrg(orgID),
+			AuthorizeMap: map[bool][]hasAuthSubjects{
+				true:  {owner, orgTemplateAdmin, orgAdmin},
+				false: {setOtherOrg, memberMe, orgMemberMe, templateAdmin, userAdmin, orgUserAdmin, orgAuditor},
+			},
+		},
 		{
 			Name:     "System",
 			Actions:  crud,