Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
languagebash
themeMidnight
titleAAF role permission setup
#resources read-write role
role create org.onap.aai.resources_all
perm create org.onap.aai.resources * get org.onap.aai.resources_all
perm create org.onap.aai.resources * put org.onap.aai.resources_all
perm create org.onap.aai.resources * post org.onap.aai.resources_all
perm create org.onap.aai.resources * patch org.onap.aai.resources_all
perm create org.onap.aai.resources * delete org.onap.aai.resources_all
user
#resources read-only role
role addcreate demo@peopleorg.onap.osaaf.orgaai.resources_readonly
perm create org.onap.aai.resources * get org.onap.aai.resources_all #just an example, add role to the correct userreadonly
 
#traversal basic role 
role create org.onap.aai.traversal_basic
perm create org.onap.aai.traversal * basic org.onap.aai.traversal_basic

#traversal advanced role
role create org.onap.aai.resourcestraversal_readonlyadvanced
perm create org.onap.aai.resourcestraversal * get advanced org.onap.aai.traversal_advanced

#adding users to roles

user role add aai@aai.onap.org org.onap.aai.traversal_advanced 
user role add so@so.onap.org org.onap.aai.traversal_advanced 
user role add sdnc@sdnc.onap.org org.onap.aai.resourcestraversal_readonly

role createadvanced
user role add dcae@dcae.onap.org org.onap.aai.traversal_advanced
user role add policy@policy.onap.org org.onap.aai.traversal_basic
perm createadvanced
user role add sdc@sdc.onap.org org.onap.aai.traversal * basic_advanced
user role add vid@vid.onap.org org.onap.aai.traversal_basicadvanced
user role create add appc@appc.onap.org org.onap.aai.traversal_advanced
perm createuser role add oof@oof.onap.org org.onap.aai.traversal * advanced org_advanced
user role add pomba@pomba.onap.org org.onap.aai.traversal_advanced
user role add vfc@vfc.onap.org org.onap.aai.traversal_advanced
user role add demo@people.osaaf.org org.onap.aai.traversal_advanced #just an example, add role to the correct user_basic

user role add aai@aai.onap.org org.onap.aai.resources_all 
user role add so@so.onap.org org.onap.aai.resources_all 
user role add sdnc@sdnc.onap.org org.onap.aai.resources_all 
user role add dcae@dcae.onap.org org.onap.aai.resources_all 
user role add policy@policy.onap.org org.onap.aai.resources_all 
user role add sdc@sdc.onap.org org.onap.aai.resources_all 
user role add vid@vid.onap.org org.onap.aai.resources_all 
user role add appc@appc.onap.org org.onap.aai.resources_all 
user role add oof@oof.onap.org org.onap.aai.resources_all 
user role add pomba@pomba.onap.org org.onap.aai.resources_all 
user role add vfc@vfc.onap.org org.onap.aai.resources_all 
user role add demo@people.osaaf.org org.onap.aai.resources_readonly 




Open questions