adn-agov-iam-admin-project/patterns/50d6c91ace65f52fa56d7113_ro.../rolesAssignment.properties

31 lines
1.2 KiB
Properties

# -- Semantics: in order to assign the 'key' role, you need one of the 'value' roles,
# -- an empty value means 'no role is authorized'.
# ------------------------------------------------------------------------------------
# -- bootstrapping
nevisIdm.Root=nevisIdm.Root
# -- assigned by root only
nevisIdm.SoapTechAccess=nevisIdm.Root
nevisIdm.SoapTechAccessReadOnly=nevisIdm.Root
nevisIdm.Impersonator=nevisIdm.Root
# -- assigned by root or itself
nevisIdm.ClientRoot=nevisIdm.Root,nevisIdm.ClientRoot
nevisIdm.EnterpriseRoleAdmin=nevisIdm.Root,nevisIdm.EnterpriseRoleAdmin
# -- assigned by EnterpriseRoleAdmin
nevisIdm.AppAdmin=nevisIdm.Root,nevisIdm.EnterpriseRoleAdmin
nevisIdm.UserAndUnitAdmin=nevisIdm.Root,nevisIdm.EnterpriseRoleAdmin
nevisIdm.Helpdesk=nevisIdm.Root,nevisIdm.EnterpriseRoleAdmin
nevisIdm.UserAdmin=nevisIdm.Root,nevisIdm.EnterpriseRoleAdmin
nevisIdm.AppOwner=nevisIdm.Root,nevisIdm.EnterpriseRoleAdmin
nevisIdm.TemplateAdmin=nevisIdm.Root,nevisIdm.EnterpriseRoleAdmin
# -- not used (we leave it accessible by root)
nevisIdm.EnterpriseRoleOwner=nevisIdm.Root
nevisIdm.SelfAdmin=nevisIdm.Root
nevisIdm.MainAppOwner=nevisIdm.Root
nevisIdm.TechUser=nevisIdm.Root