Skip to content

Commit

Permalink
Merge pull request #318 from Consdata/IGF-37402_documentation_update
Browse files Browse the repository at this point in the history
IGF-37402 Documentation update
  • Loading branch information
pbelke authored Oct 24, 2023
2 parents 3a4647e + 1098176 commit 7d44163
Showing 1 changed file with 11 additions and 2 deletions.
13 changes: 11 additions & 2 deletions docs/DEPLOYMENT.md
Original file line number Diff line number Diff line change
Expand Up @@ -287,8 +287,17 @@ Each one of this will allow user to do specific actions in Kouncil. Users with r
* `kouncil.authorization.role-editor` can view topics, event tracker pages and sent messages to topics.
* `kouncil.authorization.role-viewer` can only view topics and event tracker pages.

As a values in these parameters you should provide semicolon (`;`) separated list of groups defined in selected authentication provider (`inmemory`, `LDAP`, `AD`, `SSO`).
For in inmemory authentication we defined user groups, `admin_group`, `editor_group` and `viewer_group`, which you can use as values in Kouncil configuration file.
As a values in these parameters you should provide semicolon (`;`) separated list of groups defined in selected authentication provider (`inmemory`, `LDAP`, `AD`, `SSO`).

For the default configuration, we have defined user groups:
```yaml
kouncil:
authorization:
role-admin: admin_group
role-editor: editor_group
role-viewer: viewer_group
```
These will be used in any authentication method unless you override them in any of your configuration files, which are used by Kouncil.

Example roles configuration:
```yaml
Expand Down

0 comments on commit 7d44163

Please sign in to comment.