RBAC API
ćć®ćć¼ćøć§ćÆćSplunk AppDynamics ę©č½ć®ć¦ć¼ć¶ć¼ćć°ć«ć¼ććććć³ćć¼ć«ćē®”ēććććć«ä½æēØć§ććććć¼ć«ćć¼ć¹ ć¢ćÆć»ć¹ ć³ć³ććć¼ć«ļ¼RBACļ¼API ć”ć½ććć«ć¤ćć¦čŖ¬ęćć¾ćććććć®ęä½ć«ććęč»ę§ćåäøććRBAC ē®”ēć«ććčŖååćå®ē¾ćć¾ććaddUserToGroup ććć³ removeUserToGroup ćŖć©ć®ćŖć¬ć¼ć·ć§ć³ć·ććć®čØå®ććµćć¼ćććć¦ćć¾ćć
ćµćć¼ć
- RBAC API ć«ć¢ćÆć»ć¹ććć«ćÆć ć¢ć«ć¦ć³ćęęč ć®ćć¼ć«ćåæ č¦ć§ććć¾ććÆććē®”ēććććØć¼ćøć§ć³ćććććć³ćć¹ćæć¼ćć¢ćć ć¬ć¤ć ć¦ć£ć¶ć¼ććć®ęØ©éćå«ćę°ććć«ć¹ćæć ćć¼ć«ćä½ęć§ćć¾ćć
- SAML ććć³ LDAP ć¦ć¼ć¶ć®ä½ęćÆćµćć¼ćććć¦ćć¾ćććUI ć使ēØćć¦ęØ©éć®ćæä½ęć§ćć¾ćććć³ć³ććć¼ć©ććć³ćć®ć¦ć¼ć¶ć¼ćØć°ć«ć¼ćć®ē®”ēććåē §ćć¦ćć ććć
ć¦ć¼ć¶ć¼ć®ä½ę
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć§ć¦ć¼ć¶ćä½ęć§ćć¾ććč¦ę±ćć¤ćć¼ćć§ćÆćnamećsecurity_provider_typećdisplayNamećććć³ password ćęå®ććåæ
č¦ćććć¾ććć¦ć¼ć¶ ID ćÆćµć¼ćć«ćć£ć¦ēęććć¾ćć
å½¢å¼
POST /controller/api/rbac/v1/users
å „åćć©ć”ć¼ćæ
| ćć©ć”ć¼ćæå | Parameter Type | å¤ | åæ é |
|---|---|---|---|
name | č¦ę±ćć¤ćć¼ć | ćć | |
|
security_provider_type | č¦ę±ćć¤ćć¼ć | "INTERNAL" | ćć |
|
displayName | č¦ę±ćć¤ćć¼ć | ćć | |
|
password | č¦ę±ćć¤ćć¼ć | ćć |
ä¾
curl -H "Content-Type: application/vnd.appd.cntrl+json;v=1" -X POST -d '{"name": "user10", "security_provider_type": "INTERNAL", "displayName": "user10", "password": "welcome"}' -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/users
Response status code 200 :
{
"id": 10,
"name": "user10",
"displayName": "user10",
"security_provider_type": "INTERNAL"
}
ID ć§ć¦ć¼ć¶ćåå¾ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć§ userId ć使ēØćć¦ćé¢é£ććć°ć«ć¼ććØćć¼ć«ć®ę¦č¦ćå«ćå®å
ØćŖć¦ć¼ć¶ć¼ę
å ±ćåå¾ć§ćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/users/userId
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/users/4
Response status code 200 :
{
"id": 4,
"name": "user1",
"email": "user1@customer1.com",
"displayName": "user1",
"security_provider_type": "INTERNAL",
"roles":
[
{"id": 17,"name": "Workflow Executor"},
{"id": 18,"name": "DB Monitoring Administrator"},
{"id": 19,"name": "DB Monitoring User"},
{"id": 20,"name": "Analytics Administrator"},
{"id": 21,"name": "Server Monitoring Administrator"},
{"id": 22,"name": "Server Monitoring User"},
{"id": 23,"name": "Universal Agent Administrator"},
{"id": 24,"name": "Universal Agent User"},
{"id": 13,"name": "Account Administrator"},
{"id": 14,"name": "Administrator"},
{"id": 15,"name": "User"},
{"id": 16,"name": "Dashboard Viewer"}
],
"groups":
[
{"id": 1,"name": "group_01"}
]
}
ååć§ć¦ć¼ć¶ćåå¾ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć§ userName ć使ēØćć¦ćé¢é£ććć°ć«ć¼ććØćć¼ć«ć®ę¦č¦ćå«ćå®å
ØćŖć¦ć¼ć¶ć¼ę
å ±ćåå¾ć§ćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/users/name/name
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/users/name/user1
Response status code 200 :
{
"id": 4,
"name": "user1",
"email": "user1@customer1.com",
"displayName": "user1",
"security_provider_type": "INTERNAL",
"roles":
[
{"id": 17,"name": "Workflow Executor"},
{"id": 18,"name": "DB Monitoring Administrator"},
{"id": 19,"name": "DB Monitoring User"},
{"id": 20,"name": "Analytics Administrator"},
{"id": 21,"name": "Server Monitoring Administrator"},
{"id": 22,"name": "Server Monitoring User"},
{"id": 23,"name": "Universal Agent Administrator"},
{"id": 24,"name": "Universal Agent User"},
{"id": 13,"name": "Account Administrator"},
{"id": 14,"name": "Administrator"},
{"id": 15,"name": "User"},
{"id": 16,"name": "Dashboard Viewer"}
],
"groups":
[
{"id": 1,"name": "group_01"}
]
- ćć® API ćÆå éØć¦ć¼ć¶ć®åå¾ć®ćæććµćć¼ćććSAML ć¾ć㯠LDAP ćÆćµćć¼ććć¾ććć
- SAML/LDAP ć¦ć¼ć¶ćę¤ē“¢ććć«ćÆććŖćć·ć§ć³ć®ćć©ć”ć¼ćæļ¼securityProviderType ćå«ććåæ č¦ćććć¾ćć
ćć¹ć¦ć®ć¦ć¼ć¶ć®åå¾
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćå
ć®ćć¹ć¦ć®ć¦ć¼ć¶ć®ćŖć¹ććåå¾ć§ćć¾ćććŖć¹ćć«ćÆćuserId ć userName ćŖć©ć®ć¦ć¼ć¶ć®ę¦č¦ćå«ć¾ćć¦ćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/users
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/users
Response status code 200 :
{
"users":
[
{"id": 4,"name": "user1"},
{"id": 10,"name": "user10"}
]
}
ć¦ć¼ć¶ć¼ć®ę“ę°
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® userId ć§ć¦ć¼ć¶ćę“ę°ć§ćć¾ććć¦ć¼ć¶ćŖććøć§ćÆćčŖä½ć®ćæćę“ę°ććććć¼ć«ćć°ć«ć¼ćć«åƾćććŖć¬ć¼ć·ć§ć³ć·ćććÆå½±éæćåćć¾ććć
å½¢å¼
PUT /controller/api/rbac/v1/users/userId
å „åćć©ć”ć¼ćæ
| ćć©ć”ć¼ćæå | Parameter Type | å¤ | åæ é |
|---|---|---|---|
id | č¦ę±ćć¤ćć¼ć | ćć | |
name | č¦ę±ćć¤ćć¼ć | ćć | |
|
displayName | č¦ę±ćć¤ćć¼ć | ćć | |
|
security_provider_type | č¦ę±ćć¤ćć¼ć | "INTERNAL" | ćć |
ä¾
curl -H "Content-Type: application/vnd.appd.cntrl+json;v=1" -X PUT -d '{"id": 11,"name": "updated_user9","displayName": "user9","security_provider_type": "INTERNAL"}' -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/users/11
Response status code 200 :
{
"id": 11,
"name": "updated_user9",
"displayName": "user9",
"security_provider_type": "INTERNAL"
}
ć¦ć¼ć¶ć®åé¤
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® userId ć§ć¦ć¼ć¶ćåé¤ć§ćć¾ćć
å½¢å¼
DELETE /controller/api/rbac/v1/users/userId
ä¾
curl -X DELETE -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/users/11 Response status code 200 :
ć°ć«ć¼ćć®ä½ę
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć§ć°ć«ć¼ććä½ęć§ćć¾ććgroupId ćÆćµć¼ćć«ćć£ć¦ēęććć¾ćć
å½¢å¼
POST /controller/api/rbac/v1/groups
å „åćć©ć”ć¼ćæ
| ćć©ć”ć¼ćæå | Parameter Type | å¤ | åæ é |
|---|---|---|---|
name | č¦ę±ćć¤ćć¼ć | ćć | |
description | č¦ę±ćć¤ćć¼ć | ććć | |
|
security_provider_type | č¦ę±ćć¤ćć¼ć | "INTERNAL" | ćć |
ä¾
curl -H "Content-Type: application/vnd.appd.cntrl+json;v=1" -X POST -d '{"name": "group100","description": "new description", "security_provider_type": "INTERNAL"}' -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/groups
Response status code 200 :
{
"id": 2,
"name": "group100",
"security_provider_type": "INTERNAL",
"description": "new description"
}
ID ć§ć°ć«ć¼ććåå¾ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® groupId ć«ćć£ć¦å®å
ØćŖć°ć«ć¼ćę
å ±ćåå¾ć§ćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/groups/groupId
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/groups/1
Response status code 200 :
{
"id": 1,
"name": "group_03",
"security_provider_type": "INTERNAL"
"description": "",
"roles":
[
{"id": 19,"name": "DB Monitoring User"},
{"id": 20,"name": "Analytics Administrator"},
{"id": 21,"name": "Server Monitoring Administrator"},
{"id": 22,"name": "Server Monitoring User"},
{"id": 23,"name": "Universal Agent Administrator"},
{"id": 13,"name": "Account Administrator"},
{"id": 16,"name": "Dashboard Viewer"}
]
}
ååć§ć°ć«ć¼ććåå¾ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® groupName ć«ćć£ć¦å®å
ØćŖć°ć«ć¼ćę
å ±ćåå¾ć§ćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/groups/name/name
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/groups/name/group_03
Response status code 200 :
{
"id": 1,
"name": "group_03",
"security_provider_type": "INTERNAL"
"description": "",
"roles":
[
{"id": 19,"name": "DB Monitoring User"},
{"id": 20,"name": "Analytics Administrator"},
{"id": 21,"name": "Server Monitoring Administrator"},
{"id": 22,"name": "Server Monitoring User"},
{"id": 23,"name": "Universal Agent Administrator"},
{"id": 13,"name": "Account Administrator"},
{"id": 16,"name": "Dashboard Viewer"}
]
}
ćć¹ć¦ć®ć°ć«ć¼ććåå¾ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćå
ć®ćć¹ć¦ć®ć°ć«ć¼ććåå¾ć§ćć¾ćććććÆćgroupId ć groupName ćŖć©ć®ć°ć«ć¼ćć®ę¦č¦ć®ćæćčæćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/groups
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/groups
Response status code 200 :
{
"groups":
[
{"id": 1,"name": "group_03"},
{"id": 2,"name": "group100"}
]
}
ć°ć«ć¼ćć®ę“ę°
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® groupId ć§ć°ć«ć¼ććę“ę°ć§ćć¾ććć°ć«ć¼ćčŖä½ć®ćæćę“ę°ćććć¦ć¼ć¶ćØćć¼ć«ć®ćŖć¬ć¼ć·ć§ć³ć·ćććÆå½±éæćåćć¾ććć
å½¢å¼
PUT /controller/api/rbac/v1/groups/groupId
å „åćć©ć”ć¼ćæ
| ćć©ć”ć¼ćæå | Parameter Type | å¤ | åæ é |
|---|---|---|---|
id | č¦ę±ćć¤ćć¼ć | ćć | |
name | č¦ę±ćć¤ćć¼ć | ćć | |
description | č¦ę±ćć¤ćć¼ć | ććć | |
|
security_provider_type | č¦ę±ćć¤ćć¼ć | "INTERNAL" | ćć |
ä¾
curl -H "Content-Type: application/vnd.appd.cntrl+json;v=1" -X PUT -d '{"id": 1, "name": "group2","description": "new description", "security_provider_type": "INTERNAL"}' -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/groups/1
Response status code 200 :
{
"id": 1,
"name": "group2",
"security_provider_type": "INTERNAL",
"description": "new description",
"roles":
[
{"id": 19,"name": "DB Monitoring User"},
{"id": 20,"name": "Analytics Administrator"},
{"id": 21,"name": "Server Monitoring Administrator"},
{"id": 22,"name": "Server Monitoring User"},
{"id": 23,"name": "Universal Agent Administrator"},
{"id": 13,"name": "Account Administrator"},
{"id": 16,"name": "Dashboard Viewer"}
]
}
ć°ć«ć¼ćć®åé¤
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® groupId ć§ć°ć«ć¼ććåé¤ć§ćć¾ćć
å½¢å¼
DELETE /controller/api/rbac/v1/groups/groupId
ä¾
curl -X DELETE -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/groups/1 Response status code 200 :
ć¦ć¼ć¶ćć°ć«ć¼ćć«čæ½å ćć
ććć使ēØćć userId 㨠groupIdć«ćć£ć¦ć°ć«ć¼ćć«ć¦ć¼ć¶ć¼ćčæ½å ćć¾ćć
å½¢å¼
PUT /controller/api/rbac/v1/groups/groupId/users/userId
ä¾
curl -H "Content-Type: application/vnd.appd.cntrl+json;v=1" -X PUT -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/groups/2/users/10 Response status code 200 :
ć¦ć¼ć¶ćć°ć«ć¼ćććåé¤ćć
ććć使ēØćć userId 㨠groupIdć«ćć£ć¦ć°ć«ć¼ćććć¦ć¼ć¶ć¼ćåé¤ćć¾ćć
å½¢å¼
DELETE /controller/api/rbac/v1/groups/groupId/users/userId
ä¾
curl -X DELETE -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/groups/2/users/10 Response status code 200 :
ćć¼ć«ćä½ęćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć§ćć¼ć«ćä½ęć§ćć¾ććID ćÆćµć¼ćć«ćć£ć¦ēęććć¾ćć
å½¢å¼
POST /controller/api/rbac/v1/roles
å „åćć©ć”ć¼ćæ
| ćć©ć”ć¼ćæå | Parameter Type | å¤ | åæ é |
|---|---|---|---|
name | č¦ę±ćć¤ćć¼ć | ćć | |
description | č¦ę±ćć¤ćć¼ć | ććć | |
permissions | č¦ę±ćć¤ćć¼ć | ććć |
ä¾
curl -X POST /controller/api/rbac/v1/roles \
-H 'Content-Type: application/vnd.appd.cntrl+json;v=1' \
-d '{
"name": "SampleRole2",
"permissions": [
{
"entityType": "APPLICATION",
"action": "CONFIG_ACTIONS"
},
{
"entityType": "APPLICATION",
"action": "CONFIG_BASELINES"
},
{
"entityType": "APPLICATION",
"action": "CONFIG_BUSINESS_TRANSACTIONS"
},
{
"entityType": "APPLICATION",
"action": "CONFIG_ERROR_DETECTION"
},
{
"entityType": "APPLICATION",
"action": "CONFIG_EUM"
},
{
"entityType": "APPLICATION",
"action": "CONFIG_EVENT_REACTOR"
},
{
"entityType": "APPLICATION",
"action": "CONFIG_POLICIES"
},
{
"entityType": "APPLICATION",
"action": "CONFIG_TRANSACTION_DETECTION"
},
{
"entityType": "APPLICATION",
"action": "VIEW"
}
]
}ā
ćØć³ćć£ćć£ć¢ćÆć·ć§ć³ć®ćć¼ć«ęØ©é
| ćØć³ćć£ć㣠ćæć¤ć | ć¢ćÆć·ć§ć³ | ć¢ćÆć»ć¹čØ±åÆ |
|---|---|---|
|
ć¢ć«ć¦ć³ć | ADMINISTER_RBAC |
ć¦ć¼ć¶ć¼ćć°ć«ć¼ćććć¼ć«ćčŖčؼćē®”ēćććØć¼ćøć§ć³ćć蔨示ćć¦ć[Getting Started Wizard] ć使ēØćć¾ćć ć¦ć¼ć¶ć¼ćć°ć«ć¼ćććć¼ć«ć®ē®”ēćØčŖčؼć®čØå®ć«ć¤ćć¦ćÆććć¢ć«ć¦ć³ćē®”ēććåē §ćć¦ćć ććć |
|
ć¢ć«ć¦ć³ć | CONFIG_LDAP | LDAP ćčØå®ćć¾ćć |
|
ć¢ć«ć¦ć³ć | CONFIG_SAML | SAML ćčØå®ćć¾ćć |
|
ć¢ć«ć¦ć³ć | ADMINISTER_LICENSE | ć©ć¤ć»ć³ć¹ć蔨示ććć³ę§ęćć¾ćć |
|
ć¢ć«ć¦ć³ć | CONFIG_NOTIFICATIONS | é»åć”ć¼ć«/SMS ćčØå®ćć¾ćć |
|
ć¢ć«ć¦ć³ć | CONFIG_CUSTOM_EMAIL_ACTION_PLANS | ć”ć¼ć«ćć³ćć¬ć¼ććę§ęćć¾ćć |
|
ć¢ć«ć¦ć³ć | CONFIG_HTTP_REQUEST_ACTION_PLANS | HTTP ćŖćÆćØć¹ććć³ćć¬ć¼ććę§ęćć¾ćć |
|
ć¢ć«ć¦ć³ć | CREATE_WAR_ROOMS | ć¦ć©ć¼ć«ć¼ć ćä½ęćć¾ćć |
|
ć¢ć«ć¦ć³ć | VIEW_BUSINESS_FLOW | ććøćć¹ććć¼ćććć蔨示ćć¾ćć |
|
ć¢ć«ć¦ć³ć | VIEW_SCHEDULED_REPORTS | ć¹ć±ćøć„ć¼ćŖć³ć°ćććć¬ćć¼ćć蔨示ćć¾ćć |
|
ć¢ć«ć¦ć³ć | CONFIG_SCHEDULED_REPORTS | ć¹ć±ćøć„ć¼ćŖć³ć°ćććć¬ćć¼ććę§ęćć¾ćć |
APPLICATION | VIEW_TAGS | ćæć°ć蔨示ććć«ćÆć VIEW_TAGS 権éćåæ
č¦ć§ćć ćæć°ćē®”ēļ¼ä½ęćē·Øéćććć³åé¤ļ¼ćććć¼ć«ć«ćÆć |
| MANAGE_TAGS | [Tags] 㨠[Custom Tag APIs] ć蔨示ćć¾ćć | |
|
ć¢ććŖć±ć¼ć·ć§ć³ | VIEW | ććøćć¹ć¢ććŖć±ć¼ć·ć§ć³ć蔨示ćć¾ćć |
|
APPLICATION | VIEW_DBMON_UI | ćć¼ćæćć¼ć¹ć®åÆč¦ę§ć®č”Øē¤ŗ |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_TRANSACTION_DETECTION | ćć©ć³ć¶ćÆć·ć§ć³ę¤åŗćę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_BACKEND_DETECTION | ćććÆćØć³ćę¤åŗćę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_ERROR_DETECTION | Configure Error Detection |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_DIAGNOSTIC_DATA_COLLECTORS | 診ęćć¼ćæć³ć¬ćÆćæćę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_CALLGRAPH_SETTINGS | Configure Call Graph Settings |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_JMX | JMX ćę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_EUM | EUM ćę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_INFO_POINTS | Configure Information Points* |
|
APPLICATION | CONFIG_POLICIES | ę£åøøę§ć«ć¼ć«ć®ę§ę |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_EVENT_REACTOR | ććŖć·ć¼ć®čØå® |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_ACTIONS | ć¢ćÆć·ć§ć³ć®čØå® |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_BUSINESS_TRANSACTIONS | Configure Business Transactions |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_BASELINES | ćć¼ć¹ć©ć¤ć³ćę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_SQL_BIND_VARIABLES | SQL ćć£ććć£čØå®ćę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_AGENT_PROPERTIES | ćØć¼ćøć§ć³ćććććć£ćę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | ENABLE_JMX_OPERATIONS | JMX MBean å±ę§ćčØå®ćć¦ćŖćć¬ć¼ć·ć§ć³ćå¼ć³åŗćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_SERVICE_ENDPOINTS | ćµć¼ćć¹ćØć³ććć¤ć³ććę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | MANAGE_CUSTOM_DASHBOARD_TEMPLATES | é層ćØćć¼ćć®ć«ć¹ćæć ććć·ć„ćć¼ććę§ęćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_TRIGGER_DIAGNOSTIC_SESSION | 診ęć»ćć·ć§ć³ćéå§ćć¾ćć |
|
ć¢ććŖć±ć¼ć·ć§ć³ | VIEW_SIM | ćµć¼ćć¼ć®åÆč¦ę§ć®č”Øē¤ŗ |
|
ć¢ććŖć±ć¼ć·ć§ć³ | CONFIG_SIM | ćµć¼ćć¼ć®åÆč¦ę§ć®ę§ę |
200 OK
{
"id": 87,
"name": "SampleRole2"
}
ćć¼ć«ćć¦ć¼ć¶ćøčæ½å ćć
ććć使ēØćć roleId 㨠userIdć«ćć£ć¦ć¦ć¼ć¶ć¼ć«ćć¼ć«ćčæ½å ćć¾ćć
å½¢å¼
PUT /controller/api/rbac/v1/roles/roleId/users/userId
ä¾
curl -H "Content-Type: application/vnd.appd.cntrl+json;v=1" -X PUT -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles/50/users/10 Response status code 200 :
ć¦ć¼ć¶ćććć¼ć«ćåé¤ćć
ććć使ēØćć roleId ććć³ userIdć§ć¦ć¼ć¶ć¼ćććć¼ć«ćåé¤ćć¾ćć
å½¢å¼
DELETE /controller/api/rbac/v1/roles/roleId/users/userId
ä¾
curl -X DELETE -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles/50/users/10 Response status code 200 :
ćć¼ć«ćć°ć«ć¼ćć«čæ½å ćć
ććć使ēØćć¦ćroleId ććć³ groupId ć«ćć£ć¦ćć¼ć«ćć°ć«ć¼ćć«čæ½å ć§ćć¾ćć
å½¢å¼
PUT /controller/api/rbac/v1/roles/roleId/groups/groupId
ä¾
curl -H "Content-Type: application/vnd.appd.cntrl+json;v=1" -X PUT -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles/50/groups/2 Response status code 200 :
ć°ć«ć¼ććććć¼ć«ćåé¤ćć
ććć使ēØćć¦ćroleId ććć³ groupId ć«ćć£ć¦ćć¼ć«ćć°ć«ć¼ćććåé¤ć§ćć¾ćć
å½¢å¼
DELETE /controller/api/rbac/v1/roles/roleId/groups/groupId
ä¾
curl -X DELETE -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles/50/groups/2 Response status code 200 :
ID ć§ćć¼ć«ćåå¾ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® roleId ć§å®å
ØćŖćć¼ć«ę
å ±ćåå¾ćć¾ćććć㯠role ćŖććøć§ćÆćć®ćæćčæćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/roles/[roleId]?include-permissions=true
å „åćć©ć”ć¼ćæ
| ćć©ć”ć¼ćæå | Parameter Type | å¤ | åæ é |
|---|---|---|---|
id | č¦ę±ćć¤ćć¼ć | ćć | |
|
include-permissions (>= v4.5.14) | č¦ę±ćć¤ćć¼ć | "true" | ććć |
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles/15?include-permissions=true
Response status code 200 :
{
"id": 15,
"name": "SampleRole",
"permissions": [
{
"id": 2619,
"entityType": "APPLICATION",
"action": "CONFIG_ACTIONS"
},
{
"id": 2621,
"entityType": "APPLICATION",
"action": "CONFIG_BASELINES"
},
{
"id": 2620,
"entityType": "APPLICATION",
"action": "CONFIG_BUSINESS_TRANSACTIONS"
},
{
"id": 2610,
"entityType": "APPLICATION",
"action": "CONFIG_ERROR_DETECTION"
},
{
"id": 2615,
"entityType": "APPLICATION",
"action": "CONFIG_EUM"
},
{
"id": 2618,
"entityType": "APPLICATION",
"action": "CONFIG_EVENT_REACTOR"
},
{
"id": 2617,
"entityType": "APPLICATION",
"action": "CONFIG_POLICIES"
},
{
"id": 2608,
"entityType": "APPLICATION",
"action": "CONFIG_TRANSACTION_DETECTION"
},
{
"id": 2606,
"entityType": "APPLICATION",
"action": "VIEW"
}
]
}
ååć§ćć¼ć«ćåå¾ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® roleName ć§å®å
ØćŖćć¼ć«ę
å ±ćåå¾ćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/roles/name/[RoleName]?include-permissions=true
å „åćć©ć”ć¼ćæ
| ćć©ć”ć¼ćæå | Parameter Type | å¤ | åæ é |
|---|---|---|---|
| name | č¦ę±ćć¤ćć¼ć | ćć | |
|
include-permissions (>= v4.5.14) | č¦ę±ćć¤ćć¼ć | "true" | ććć |
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles/name/SampleRole?include-permissions=true
Response status code 200 :
{
"id": 15,
"name": "SampleRole",
"permissions": [
{
"id": 2619,
"entityType": "APPLICATION",
"action": "CONFIG_ACTIONS"
},
{
"id": 2621,
"entityType": "APPLICATION",
"action": "CONFIG_BASELINES"
},
{
"id": 2620,
"entityType": "APPLICATION",
"action": "CONFIG_BUSINESS_TRANSACTIONS"
},
{
"id": 2610,
"entityType": "APPLICATION",
"action": "CONFIG_ERROR_DETECTION"
},
{
"id": 2615,
"entityType": "APPLICATION",
"action": "CONFIG_EUM"
},
{
"id": 2618,
"entityType": "APPLICATION",
"action": "CONFIG_EVENT_REACTOR"
},
{
"id": 2617,
"entityType": "APPLICATION",
"action": "CONFIG_POLICIES"
},
{
"id": 2608,
"entityType": "APPLICATION",
"action": "CONFIG_TRANSACTION_DETECTION"
},
{
"id": 2606,
"entityType": "APPLICATION",
"action": "VIEW"
}
]
}
ćć¹ć¦ć®ćć¼ć«ćåå¾ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćå
ć®ćć¹ć¦ć®ćć¼ć«ćåå¾ć§ćć¾ćććććÆćroleId ć roleName ćŖć©ć®ćć¼ć«ć®ę¦č¦ć®ćæćčæćć¾ćć
å½¢å¼
GET /controller/api/rbac/v1/roles
ä¾
curl -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles
Response status code 200 :
{
"roles":
[
{"id": 13,"name": "Account Administrator"},
{"id": 14,"name": "Administrator"},
{"id": 20,"name": "Analytics Administrator"},
{"id": 16,"name": "Dashboard Viewer"},
{"id": 18,"name": "DB Monitoring Administrator"},
{"id": 19,"name": "DB Monitoring User"},
{"id": 21,"name": "Server Monitoring Administrator"},
{"id": 22,"name": "Server Monitoring User"},
{"id": 23,"name": "Universal Agent Administrator"},
{"id": 24,"name": "Universal Agent User"},
{"id": 15,"name": "User"},
{"id": 17,"name": "Workflow Executor"}
]
}
ćć¼ć«ćę“ę°ćć
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć® roleId ć§ćć¼ć«ćę“ę°ć§ćć¾ććććć«ćććrole ćŖććøć§ćÆćčŖä½ć®ćæćę“ę°ćććć¦ć¼ć¶ććć³ć°ć«ć¼ććØć®é¢äæćÆå½±éæćåćć¾ććć
ćć® API ć使ēØćć¦ćć¼ć«å
ć®ęØ©éćę“ę°ććććØćÆć§ćć¾ćććname ććć³ description ćć©ć”ć¼ćæć®ćæę“ę°ć§ćć¾ćć
å½¢å¼
PUT /controller/api/rbac/v1/roles/roleId
å „åćć©ć”ć¼ćæ
| ćć©ć”ć¼ćæå | Parameter Type | å¤ | åæ é |
|---|---|---|---|
id | č¦ę±ćć¤ćć¼ć | ćć | |
name | č¦ę±ćć¤ćć¼ć | ćć | |
description | č¦ę±ćć¤ćć¼ć | ććć |
ä¾
curl -H "Content-Type: application/vnd.appd.cntrl+json;v=1" -X PUT -d '{"id": 49, "name": "role1","description": "new description" }' -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles/49
Response status code 200 :
{
"id": 49,
"name": "role1",
"description": "new description"
}
ćć¼ć«ć®åé¤
ććć使ēØćć¦ćē¾åØć®ć¢ć«ć¦ć³ćć§ćć¼ć«ćåé¤ć§ćć¾ćć
å½¢å¼
DELETE /controller/api/rbac/v1/roles/roleId
ä¾
curl -X DELETE -u user1@customer1 http://localhost:8080/controller/api/rbac/v1/roles/49 Response status code 200 :