Permissions

The DUM Application allows assigning various permissions to the application's end-users. This guide will walk you though the the list of available permissions and their meanings.

A permission is an authorization for performing a specific operation within the DUM Application's application. Permissions within DUM Application can be assigned by a person to another person. The DUM Application permissions are based on the DUM Engine permissions implementation so the get a full understanding of the concept please also read the DUM Engines documentation.

Supported permissions

Below all the supported by the DUM Application permissions are listed with the corresponding DUM Engine permissions.

DUM Application permission DUM Engine permission Allowed operations
GROUPS_CRUD GROUP_MANAGE, GROUP_POLICY_MANAGE, GROUP_MEMBER_MANAGE, PERMISSION_MANAGE Allows user to manage groups, invite new and remove existing group members and assign permissions within a group to existing group members
SCOPES_CRUD SCOPE_MANAGE Allows user to create new and remove existing scopes via DUM Engine APIs. Please note that the scopes are global.
GROUP_MEMBERS_CRUD GROUP_MEMBER_MANAGE Allows user to invite new and remove existing members within a group, being is a subject for this permission
USER_POLICIES_CRUD PERSON_​POLICY_​MANAGE Allows user to assign new policies and remove existing ones within the group, being a subject for this permission
USER_​PERMISSIONS_​CRUD PERMISSION_MANAGE Allows user to manage permissions of the group, being a subject for this permission, members

Assigning permissions

Before you will be able to use the DUM Application application interface to assign permissions to other users you will firstly need to grant sufficient permissions to yourself. The initial user's permissions must be assigned via DUM Engines REST APIs. Please consider assigning GROUPS_CRUD permission (GROUP_MANAGE, GROUP_POLICY_MANAGE, GROUP_MEMBER_MANAGE, PERMISSION_MANAGE) for the first user to get started. For more information about DUM Engine REST APIs please refer to the DUM Engine documentation.