Permissions
The DUM Application allows assigning various permissions to the application's end-users. This guide will walk you though the the list of available permissions and their meanings.
A permission
is an authorization for performing a specific operation within the DUM Application's application. Permissions within DUM Application can be assigned
by a person to another person. The DUM Application permissions are based on the DUM Engine permissions implementation so the get a full understanding of the concept please
also read the DUM Engines documentation.
Supported permissions
Below all the supported by the DUM Application permissions are listed with the corresponding DUM Engine permissions.
DUM Application permission | DUM Engine permission | Allowed operations |
---|---|---|
GROUPS_CRUD | GROUP_MANAGE, GROUP_POLICY_MANAGE, GROUP_MEMBER_MANAGE, PERMISSION_MANAGE | Allows user to manage groups, invite new and remove existing group members and assign permissions within a group to existing group members |
SCOPES_CRUD | SCOPE_MANAGE | Allows user to create new and remove existing scopes via DUM Engine APIs. Please note that the scopes are global. |
GROUP_MEMBERS_CRUD | GROUP_MEMBER_MANAGE | Allows user to invite new and remove existing members within a group, being is a subject for this permission |
USER_POLICIES_CRUD | PERSON_POLICY_MANAGE | Allows user to assign new policies and remove existing ones within the group, being a subject for this permission |
USER_PERMISSIONS_CRUD | PERMISSION_MANAGE | Allows user to manage permissions of the group, being a subject for this permission, members |
Assigning permissions
Before you will be able to use the DUM Application application interface to assign permissions to other users you will firstly need to grant sufficient permissions to
yourself. The initial user's permissions must be assigned via DUM Engines REST APIs. Please consider assigning GROUPS_CRUD
permission (GROUP_MANAGE
, GROUP_POLICY_MANAGE
,
GROUP_MEMBER_MANAGE
, PERMISSION_MANAGE
) for the first user to get started. For more information about DUM Engine REST APIs please refer to the DUM Engine documentation.