32 lines
949 B
YAML
32 lines
949 B
YAML
description: Admin project level access control. Applies to resources within a specific project.
|
|
context:
|
|
project: '.*' # all projects
|
|
for:
|
|
resource:
|
|
- allow: '*' # allow read/create all kinds
|
|
adhoc:
|
|
- allow: '*' # allow read/running/killing adhoc jobs
|
|
job:
|
|
- allow: '*' # allow read/write/delete/run/kill of all jobs
|
|
node:
|
|
- allow: '*' # allow read/run for all nodes
|
|
by:
|
|
group: [rundeckadm]
|
|
|
|
---
|
|
|
|
description: Admin Application level access control, applies to creating/deleting projects, admin of user profiles, viewing projects and reading system information.
|
|
context:
|
|
application: 'rundeck'
|
|
for:
|
|
resource:
|
|
- allow: '*' # allow create of projects
|
|
project:
|
|
- allow: '*' # allow view/admin of all projects
|
|
project_acl:
|
|
- allow: '*' # allow admin of all project-level ACL policies
|
|
storage:
|
|
- allow: '*' # allow read/create/update/delete for all /keys/* storage content
|
|
by:
|
|
group: [rundeckadm]
|