/
Security CLI commands
Security CLI commands
<input> - will have to be provided by users, no autocomplete
[input] - autocomplete will be available
Function | Existing Command | Proposed Change | Comments |
---|---|---|---|
Grant | security grant entity <entity-id> principal-type <principal-type> principal-name <principal-name> actions <actions> | grant actions <actions> on entity <entity-id> to [principal-type] <principal-name> | Should we make these role-based only like Sentry? Or allow users and groups too? |
Revoke | security revoke entity <entity-id> principal-type <principal-type> principal-name <principal-name> actions <actions> | revoke actions <actions> on entity <entity-id> from [principal-type] <principal-name> | |
Check Access | security access entity <entity-id> principal-type <principal-type> principal-name <principal-name> actions <actions> | Remove. | |
Create Role | - | create role <role-name> | |
Drop Role | - | drop role <role-name> | |
List Roles | - | list roles | |
Add role to group | - | add role <role-name> to group <group-name> | Q: Should we allow adding roles to users as well? Sentry only supports adding to groups. |
Remove role from group | - | remove role <role-name> from group <group-name> | |
List roles for group | - | list roles for group <group-name> | |
List privileges for role | - | list privileges for role <role-name> |
, multiple selections available,
Related content
Security Commands
Security Commands
More like this
Operations that Require Multiple Privileges
Operations that Require Multiple Privileges
More like this
Security Microservices
Security Microservices
More like this
Authorization policies
Authorization policies
More like this
Security - CDAP 3.5
Security - CDAP 3.5
More like this
Authorization Design
Authorization Design
More like this
Created in 2020 by Google Inc.