|
1 | 1 | [id='configuring-authorization-in-rhdh']
|
2 | 2 | = Configuring authorization in {product}
|
3 | 3 |
|
4 |
| -In link:{authorization-book-url}[{authentication-book-title}], you learnt how to authenticate users to {product}. |
5 |
| -{product-short} knowns who the users are. |
| 4 | +Administrators can authorize users to perform actions and define what users can do in {product-short}. |
6 | 5 |
|
7 |
| -In this book, learn how to authorize users to perform actions in {product-short}. |
8 |
| -Define what users can do in {product-short}. |
| 6 | +Role-based access control (RBAC) is a security concept that defines how to control access to resources in a system by specifying a mapping between users of the system and the actions that those users can perform on resources in the system. |
| 7 | +You can use RBAC to define roles with specific permissions and then assign the roles to users and groups. |
9 | 8 |
|
10 |
| -Role-Based Access Control (RBAC) is a security concept that controls access to resources in a system, and specifies a mapping between users of the system, and the actions they can perform on resources in the system. |
11 |
| -You define roles with specific permissions, and then assign the roles to users and groups. |
| 9 | +RBAC on {product-short} is built on top of the Permissions framework, which defines RBAC policies in code. Rather than defining policies in code, you can use the {product-short} RBAC feature to define policies in a declarative fashion by using a simple CSV based format. You can define the policies by using {product-short} web interface or REST API instead of editing the CSV directly. |
12 | 10 |
|
13 |
| -RBAC on {product-short} is built on top of the Permissions framework, which defines RBAC policies in code. |
14 |
| -Rather than defining policies in code, |
15 |
| -the {product-short} RBAC feature allows you |
16 |
| -to define policies in a declarative fashion using a simple CSV based format. |
17 |
| -You can define the policies by using {product-short} web interface or REST API, rather than editing the CSV directly. |
| 11 | +An administrator can define authorizations in {product-short} by taking the following steps: |
18 | 12 |
|
19 |
| -To define authorizations in {product-short}: |
| 13 | +. Enable the RBAC feature and give authorized users access to the feature. |
20 | 14 |
|
21 |
| -. The {product-short} administrator enables and gives access to the RBAC feature. |
22 |
| - |
23 |
| -. You define your roles and policies by combining the following methods: |
| 15 | +. Define roles and policies by combining the following methods: |
24 | 16 |
|
25 | 17 | * The {product-short} policy administrator uses the {product-short} web interface or REST API.
|
26 | 18 | * The {product-short} administrator edits the main {product-short} configuration file.
|
@@ -59,4 +51,3 @@ include::modules/authorization/con-user-stats-rhdh.adoc[leveloffset=+1]
|
59 | 51 |
|
60 | 52 |
|
61 | 53 | include::modules/authorization/proc-download-user-stats-rhdh.adoc[leveloffset=+2]
|
62 |
| - |
0 commit comments