akka organizations roles

Manage organization custom roles.

Synopsis

The akka organizations roles commands manage the custom roles of an organization. A custom role is a policy made up of rules, each of which grants permissions on resources of the organization. Once created, a custom role can be granted to principals by creating a role binding to it, using akka organizations role-bindings add --custom-role.

Custom roles are described by a YAML descriptor, which is the same as the protobuf representation of a custom role, except that it has an id field, containing just the id of the role, instead of a name field. For example:

id: project-deployer description: Can view and deploy to all projects rules: - resources: ["projects/"] permissions: ["project.get", "project.services."] - roles: ["roles/organization/viewer"]

Use akka organizations roles export to export an existing role as a starting point.

Changes to custom roles are eventually consistent, they may take some time to be applied.

For more details, see https://doc.akka.io/operations/security/custom-roles.html .

Options

  -h, --help   help for roles

Options inherited from parent commands

      --cache-file string   location of cache file (default "~/.akka/cache.yaml")
      --config string       location of config file (default "~/.akka/config.yaml")
      --context string      configuration context to use
      --disable-prompt      Disable all interactive prompts when running akka commands. If input is required, defaults will be used, or an error will be raised.
                            This is equivalent to setting the environment variable AKKA_DISABLE_PROMPTS to true.
  -o, --output string       set output format to one of [text,json,json-compact,go-template=] (default "text")
      --page-mode string    the mode for paging, either paged, buffered or auto. (default "auto")
  -q, --quiet               set quiet output (helpful when used as part of a script)
      --timeout duration    client command timeout (default 10s)
      --use-grpc-web        use grpc-web when talking to Akka APIs. This is useful when behind corporate firewalls that decrypt traffic but don't support HTTP/2.
      --verbose             set verbose output

SEE ALSO