...
| Code Block |
|---|
user-mgmt-service:
config:
# # - in built scope types:
# # Kloudfuse has following inbuilt scopeRBAC policies
# # rbac_allow_all -- this policy grants admin like access (View + Edit capabilities for all data scope/workflows).
# # scoperbac_viewerallow_allnone -- this policy grantsdenies viewerall accesscapabilities (ViewNo data onlyview, noNo edit workflow capabilities)
# # scoperbac_allowview_noneall -- this policy deniesgrants viewer allaccess capabilitiesto (Noall data view, Nono edit workflow capabilities).
# #
default_rbac_policy: scoperbac_allow_none |
Example: Default policy to provide custom scope
...
| Code Block |
|---|
# policy name
- name: rbac_admin_all
# Role (one of admin/viewer/editor)
role: admin
# using inbuilt scope "all"
scope:
type: all |
In addition kfuse has following inbuilt rbac policies which can be used in rbac config for any group.
| Code Block |
|---|
# Kloudfuse has following inbuilt RBAC policies
# rbac_allow_all - allows all operations for everyone
# rbac_allow_none - No accesss
# rbac_view_all - allow all READ operations for everyone |
Scope
A scope defines what data a given user has access to. Kloudfuse platform has following inbuilt (reserved) access types.
...