iam:SolutionPermissions

Description

This page defines the permission configuration for accessing resources from the platform or other solutions. It also lists the permissions for accessing platform resources.

Schema

{
    "name": "SolutionPermissions",
    "allowObjectFragments": false,
    "allowedLayers": [
        "SOLUTION"
    ],
    "identifyingProperties": ["/name"],
    "jsonSchema": {
        "$schema": "http://json-schema.org/draft-07/schema",
        "type": "object",
        "title": "Solution Principal Permissions Access",
        "description": "Schema comprises the permissions which a solution principal can access.",
        "required": [
            "permissions",
            "name"
        ],
        "properties": {
            "permissions": {
                "type": "array",
                "uniqueItems": true,
                "minItems": 1,
                "description": "List of all the permissions the solution has access to and if it can run in background.",
                "items": {
                    "type": "object",
                    "description": "This specifies permission id the solution has access to.",
                    "required": [
                        "id"
                    ],
                    "properties": {
                        "id": {
                            "$ref": "#/definitions/objectReference",
                            "description": "Namespace + Name of the permission.",
                            "examples": [
                                "uql:canExecuteUqlQuery",
                                "dashboard:canReadDashboard"
                            ]
                        },
                        "can_access_in_background": {
                            "type": "boolean",
                            "description": "Indicates whether this permission is granted to solution principal without users context.",
                            "default": false
                        }
                    }
                }
            },
            "name": {
                "type": "string",
                "description": "A unique name."
            }
        },
        "definitions": {
            "objectReference": {
                "type": "string",
                "description": "A fully qualified identifier of another object in the format <namespace>:<objName>.",
                "pattern": "^[a-z0-9]([A-Za-z0-9_\\-]){0,64}:[a-z]+[A-Za-z0-9_.]{0,256}[^._]$",
                "examples": [
                    "fmm:canUpdateMetrics",
                    "dashbard:canAccessDashboard"
                ]
            }
        },
        "additionalProperties": false
    }
}

Syntax

{
    "permissions": [
        {
            "id": "<string>",
            "can_access_in_background": "<boolean>"
            "name": "<string>"
         },
         {
             "..."
         }
    ]
}

Attributes

Default Platform Permissions

Example

{
    "permissions": [
        {
            "id": "healthruleapiservice:getHealthRules",
            "can_access_in_background": true
        },
        {
            "id": "healthruleapiservice:getHealthRulesV2",
            "can_access_in_background": false
        },
        {
            "id": "iampolicymgmtsa:readAccessConfigs"
        },
        {
            "id": "iamappprincipalmgmtsa:readServicePrincipals",
            "can_access_in_background": true
        }
    ],
    "name": "default"
}