Access to keycloak and A&R API

[LindsayMacfarlane]

Description

The information services team has reached out to:

• learn about how to re-use the Keycloak permissions for Dates of Operation
• Enable access to the A&R API with a service account granting read only access to get the list of bundles, operators, park areas, and park sub-areas. This will support having a complete list of each each category and the associated mapping between.

[LindsayMacfarlane]

@cameronpettit - are you able to add more context or dev criteria to support this ticket? Rebecca mentioned she's already been chatting with you on how this can be implemented. I assigned this to AR-api, but please correct if incorrect.

FYI @Dianadec

[LindsayMacfarlane]

Stand-up, October 23 - @cameronpettit recommends that this ticket needs a lot of fleshing out. This will be additional work. We can give them what they want, but it may not be the correct data source and we don't fully understand the goals of this request.

[cameronpettit]

From what I gathered from my conversation with Justin, Info Services are looking to link 'subareas' to their park operators. 'Subareas' is in quotations because the definition of this term differs between projects. They mentioned that having an endpoint that rolls up the current state of roles and users in Keycloak on a nightly cron would be useful to them. Ultimately, Keycloak roles link users (POs) to their subareas, and the subarea contains the bundle name as metadata, which would connect users to the bundle as well.

We should be able to build such an endpoint without much issue but I'm unclear that this Keycloak data source is correct for Info Service's need, especially because the subarea definition does not align with anything outside the A&R system. It would be helpful to see a detailed plan of what they are looking for, explicitly what they expect to get from our A&R system and how they will be using the information. Then we will have to get a dev to investigate the feasibility and whether or not we can actually provide what theyre asking for. Finally we will have to implement. It's not clear if this is a simple ask thus far - mainly just because it has been forever since I personally have worked in the A&R system.