You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/components/identity/authorization.md
+12-6Lines changed: 12 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,14 +4,16 @@ title: Authorizations
4
4
description: "Learn how to manage authorizations to an orchestration cluster."
5
5
---
6
6
7
-
An authorization grants permissions to an **owner** to perform actions on a specific **resource**.
7
+
An authorization grants an **owner**access to a **resource** and defines the specific **permissions** they have.
8
8
9
-
- The **owner** is the entity that receives permissions, such as a[user](user.md), [group](group.md), [role](role.md), [client](client.md), or [mapping rule](./mapping-rules/manage-mapping-rules.md).
10
-
- The **resource** is the object that the permissions apply to, like a process definitionor a decision instance.
9
+
- The **owner** is the entity that receives permissions, like[user](user.md), [group](group.md), [role](role.md), [client](client.md), or [mapping rule](./mapping-rules/manage-mapping-rules.md).
10
+
- The **resource** is the object that the permissions apply to, like process definition, decision definition, or system. See the full list of [available resources](/components/concepts/access-control/authorizations.md#available-resources).
11
11
12
-
Each authorization specifies which actions (e.g., `READ`, `UPDATE`, `DELETE`) the owner is allowed to perform on the resource.
12
+
Each authorization specifies which permissions (e.g., `READ`, `UPDATE`, `DELETE`) the owner has on the resource.
13
13
14
-
To learn more about authorizations, see [authorizations](/components/concepts/access-control/authorizations.md).
14
+
:::tip
15
+
To learn more, see the [authorization concepts](/components/concepts/access-control/authorizations.md).
16
+
:::
15
17
16
18
## Create an authorization
17
19
@@ -22,7 +24,7 @@ To create a new authorization:
22
24
3. Provide the following information:
23
25
-**Owner type**: The entity to which you want to assign permissions, such as a User, Group, Role, Client, or Mapping rule.
24
26
-**Owner ID**: The unique ID of the owner.
25
-
-**Resource type**: The selected resource type from the list of [available resources](/components/concepts/access-control/authorizations.md#available-resources).
27
+
-**Resource type**: The selected resource type.
26
28
-**Resource ID**: The ID of the resource. Use `*` to grant permissions for all resources of the selected type.
27
29
4. Select the permissions you want to grant.
28
30
5. Click **Create authorization**.
@@ -31,6 +33,10 @@ The authorization is created, and the owner is granted the specified permissions
Authorizations cannot be updated after they are created. To edit an authorization, you must first [delete](#delete-an-authorization) the existing one and then create a new authorization with the updated permissions.
Copy file name to clipboardExpand all lines: docs/components/identity/mapping-rules/assign-mapping-rules-to-tenants.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ import TabItem from "@theme/TabItem";
11
11
Mapping rules grant access to a tenant based on access token claim values. This guide details how to assign, update, or remove these rules.
12
12
13
13
:::tip
14
-
To learn more about mapping rules and tenants, see the [mapping rules documentation](manage-mapping-rules.md) and [tenant management documentation](/self-managed/components/orchestration-cluster/identity/manage-tenants.md).
14
+
To learn more about mapping rules and tenants, see the [mapping rules](manage-mapping-rules.md) and [tenant management](/self-managed/components/orchestration-cluster/identity/manage-tenants.md) user guides.
15
15
:::
16
16
17
17
1. Log in to the Identity UI and go to the **Tenants** tab.
Copy file name to clipboardExpand all lines: docs/components/identity/mapping-rules/mapping-rules-authorizations.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ import TabItem from "@theme/TabItem";
11
11
This guide explains how to assign users, groups, roles or clients permission to manage specific mapping rules. To learn how to create mapping rules themselves, see [Manage mapping rules](manage-mapping-rules.md).
12
12
13
13
:::tip
14
-
To learn more about the concept of mapping rules, see the [mapping rules documentation](../../concepts/access-control/mapping-rules.md).
14
+
To learn more, see the [mapping rules concepts](../../concepts/access-control/mapping-rules.md).
15
15
:::
16
16
17
17
1. Log in to the Identity UI and navigate to the **Authorizations** tab.
0 commit comments