adn-agov-iam-admin-project/patterns/50d6c91ace65f52fa56d7113_ro.../authorizationConfig.properties

31 lines
2.0 KiB
Properties
Raw Normal View History

2024-10-21 08:11:34 +00:00
# -- defines which role is allowed to modify or delete which other role
# ---------------------------------------------------------------------
# -- not used
nevisIdm.SelfAdmin=
nevisIdm.Impersonator=
nevisIdm.TechUser=
nevisIdm.BatchJobAdmin=
nevisIdm.SoapTechAccessReadOnly=
nevisIdm.EnterpriseRoleOwner=
nevisIdm.MainAppOwner=
# -- low priviledge, not accessing users or not modifiying them
nevisIdm.Helpdesk=nevisIdm.SelfAdmin
nevisIdm.TemplateAdmin=nevisIdm.SelfAdmin
nevisIdm.UserAndUnitAdmin=nevisIdm.SelfAdmin
nevisIdm.AppAdmin=nevisIdm.SelfAdmin
# -- medium priviledge admin tasks
nevisIdm.UserAdmin=nevisIdm.UserAdmin,nevisIdm.SelfAdmin,nevisIdm.Helpdesk,nevisIdm.TemplateAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.AppAdmin,nevisIdm.AppOwner
nevisIdm.AppOwner=nevisIdm.AppOwner,nevisIdm.UserAdmin,nevisIdm.SelfAdmin,nevisIdm.Helpdesk,nevisIdm.TemplateAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.AppAdmin
nevisIdm.EnterpriseRoleAdmin=nevisIdm.EnterpriseRoleAdmin,nevisIdm.UserAdmin,nevisIdm.SelfAdmin,nevisIdm.Helpdesk,nevisIdm.TemplateAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.AppAdmin,nevisIdm.AppOwner
nevisIdm.ClientRoot=nevisIdm.ClientRoot,nevisIdm.UserAdmin,nevisIdm.SelfAdmin,nevisIdm.Helpdesk,nevisIdm.TemplateAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.AppAdmin,nevisIdm.AppOwner
# -- tech user access
nevisIdm.SoapTechAccess=nevisIdm.SelfAdmin,nevisIdm.UserAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.MainAppOwner,nevisIdm.AppOwner,nevisIdm.Helpdesk,nevisIdm.TechUser,nevisIdm.AppAdmin,nevisIdm.SoapTechAccess,nevisIdm.SoapTechAccessReadOnly,nevisIdm.TemplateAdmin,nevisIdm.EnterpriseRoleOwner
# -- priviledged account, high priviledge admin tasks, only exceptional usage
nevisIdm.Root=nevisIdm.SelfAdmin,nevisIdm.UserAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.MainAppOwner,nevisIdm.AppOwner,nevisIdm.Helpdesk,nevisIdm.TechUser,nevisIdm.AppAdmin,nevisIdm.SoapTechAccess,nevisIdm.SoapTechAccessReadOnly,nevisIdm.Root,nevisIdm.TemplateAdmin,nevisIdm.ClientRoot,nevisIdm.Impersonator,nevisIdm.EnterpriseRoleAdmin,nevisIdm.EnterpriseRoleOwner