Syntax of RBAC Policies

Policy Structure

An RBAC policy consists of a Version, a Statement, and Depends.

Figura 1 Policy structure

Policy Syntax

Click to view the details of a policy. The DDS Administrator policy is used as an example to describe the syntax of RBAC policies.

Figura 2 DDS Administrator policy

{
        "Version": "1.0",
        "Statement": [
                {
                        "Effect": "Allow",
                        "Action": [
                                "DDS:DDS:*"
                        ],
                        "Resource": [                     
                                "DDS:*:*:instanceName:dds-*"                
                        ],
                }
        ],
        "Depends": [
                {
                        "catalog": "BASE",
                        "display_name": "Server Administrator"
                },
                {
                        "catalog": "BASE",
                        "display_name": "Tenant Guest"
                }
        ]
}