def get_workspace_access_for_role(role_name, workspace_type):
    """Return a TFE permission level for a *role* (not a team) to a particular workspace."""
    access_for_roles = {
        "tlz_admin": {
            "baseline": "read",
            "resource": "write"
        },
        "tlz_developer": {
            "baseline": "read",
            "resource": "plan"
        },
        "tlz_developer_ro": {
            "baseline": "read",
            "resource": "read"            
        }
    }
    try:
        return access_for_roles[role_name][workspace_type]
    except KeyError:
        return None