Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 24 additions & 1 deletion assemblies/assembly-configuring-authorization-in-rhdh.adoc
Original file line number Diff line number Diff line change
@@ -1,7 +1,30 @@
[id='configuring-authorization-in-rhdh']
= Configuring authorization in {product}

include::modules/authorization/con-rbac-overview.adoc[leveloffset=+1]
In link:{authorization-book-url}[{authentication-book-title}], you learnt how to authenticate users to {product}.
{product-short} knowns who the users are.

In this book, learn how to authorize users to perform actions in {product-short}.
Define what users can do in {product-short}.

Role-Based Access Control (RBAC) is a security concept that controls access to resources in a system, and specifies a mapping between users of the system, and the actions they can perform on resources in the system.
You define roles with specific permissions, and then assign the roles to users and groups.

RBAC on {product-short} is built on top of the Permissions framework, which defines RBAC policies in code.
Rather than defining policies in code,
the {product-short} RBAC feature allows you
to define policies in a declarative fashion using a simple CSV based format.
You can define the policies by using {product-short} web interface or REST API, rather than editing the CSV directly.

To apply RBAC in {product-short}:

. The {product-short} administrator sets up the RBAC feature:
.. Enable the RBAC feature
.. Configure Policy Administrators

. The {product-short} policy administrator configures your RBAC policies:
.. Define roles with specific permissions
.. Assign the roles to users and groups


include::modules/authorization/ref-rbac-permission-policies.adoc[leveloffset=+1]
Expand Down
6 changes: 0 additions & 6 deletions modules/authorization/con-rbac-overview.adoc

This file was deleted.