example-role-creation.py

# An example how to use PrivX API for role creation.
# Requires Python 3.6+

import sys

# Import the PrivX python library.
import privx_api
import config

# Initialize the API.
api = privx_api.PrivXAPI(config.HOSTNAME, config.HOSTPORT, config.CA_CERT,
                         config.OAUTH_CLIENT_ID, config.OAUTH_CLIENT_SECRET)

# Authenticate.
# NOTE: fill in your credentials from secure storage, this is just an example
api.authenticate("API client ID", "API client secret")

# Get sources.
sourceID = ""
resp = api.get_sources()
if resp.ok():
    # Select wanted source, "Local users" for example.
    for item in resp.data()["items"]:
        if item["name"] == "Local users":
            sourceID = item["id"]
else:
    print(resp.data())
    sys.exit(1)


if sourceID == "":
    print("did not find source ID")
    sys.exit(1)


# Create role.
data = {
    "name": "testrole",
    "source_rules": {
        "type": "GROUP",
        "match": "ANY",
        "rules": [{
            "type": "RULE",
            "source": sourceID,
            "search_string": "(cn=testuser)"
        }]
    },
}
resp = api.create_role(data)
if resp.ok():
    print("Role created.")
else:
    print("Role creation failed.")
    print(resp.data())