[Question] How does extension registration and de-registration tie into the security system?

[peternied]

On service startup, all extenesions are loaded, and scopes are validated.

• For every extensions they make a call to enable or disable service accounts.
  • If Enabled, create or return existing service account
  • If Disabled, deactive or do not create service account

[peternied]

@scrawfor99 I think this is covered in your docs, do you want to update this issue or close and incorporate these ideas elsewhere

[stephen-crawford]

Hi @peternied, I will go ahead and add this to the Service Accounts issue #2597. It is going to be part of the first question: "How is extension registration tied to service accounts?"