[release-1.4] RHIDP-4490: Introduce pluginsWithPermission information (#823)

Co-authored-by: Fabrice Flore-Thébault <[email protected]>
Co-authored-by: Oleksandr Andriienko <[email protected]>
Co-authored-by: Dominika Zemanovicova <[email protected]>
Co-authored-by: Dominika Zemanovicova <[email protected]>

Author: 4 people

modules/authorization/proc-enabling-the-rbac-plugin.adoc

@@ -39,6 +39,24 @@ permission:
       users:
         - name: user:default/__<your_policy_administrator_name>__
 ----
+. In order for the {product-short} Web UI to display available permissions provided by installed plugins, add the corresponding plugin IDs to link:{configuring-book-url}[your custom `{my-app-config-file}` {product-short} configuration file].
++
+To display available permissions in RBAC UI, edit your custom {product-short} ConfigMap, such as `app-config-rhdh`, and add following code to the `{my-app-config-file}` content:
++
+.`{my-app-config-file}` fragment
+[source,yaml,subs=+quotes]
+----
+permission:
+  enabled: true
+  rbac:
+    admin:
+      users:
+        - name: user:default/__<your_policy_administrator_name>__
+    pluginsWithPermission:
+      - catalog
+      - scaffolder
+      - permission
+----
 
 .Verification
 . Sign out from the existing {product} session and log in again using the declared policy administrator account.

modules/authorization/proc-rbac-ui-create-role.adoc

@@ -4,7 +4,7 @@
 You can create a role in the {product} using the Web UI.
 
 .Prerequisites
-* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}].
+* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC, have a policy administrator role in {product-short}, and have added plugins with permission].
 
 .Procedure
 

modules/authorization/proc-rbac-ui-edit-role.adoc

@@ -9,7 +9,7 @@ The policies generated from a `policy.csv` or ConfigMap file cannot be edited or
 ====
 
 .Prerequisites
-* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}].
+* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC, have a policy administrator role in {product-short}, and have added plugins with permission].
 * The role that you want to edit is created in the {product-short}.
 
 .Procedure