Layer7 API Management

Expand all | Collapse all

Configure Operator Role without Policy Manager

  • 1.  Configure Operator Role without Policy Manager

    Posted 10-24-2018 01:34 AM

    Hi Techies,

    Is there any possibility to configure operator role without login in to policy manager . I mean to say using db or system file configuration .

     

    Thansk!

    Prashant Srivastava



  • 2.  Re: Configure Operator Role without Policy Manager

    Posted 10-24-2018 05:51 PM

    You can use /restman interface.

    The restman document is on your gateway,

    https://<your gateway>:8443/restman/1.0/doc/restDoc.html#1.0/roles

     

     

    Regards,

    Mark



  • 3.  Re: Configure Operator Role without Policy Manager

    Posted 10-25-2018 12:49 PM

    For adding an assignment for a role you will need to gather a bit of information first which can be done in Restman calls.
    1) Call to get the unique id for the Operator role(Note that the operator role is a built in role so the ID should be the same on each system)
    https://<gateway FQDN>:8443/restman/1.0/roles?name=Operator
    Apart you are looking for
    ...
    <l7:Item>
    <l7:Name>Operator</l7:Name>
    <l7:Id>0000000000000000ffffffffffffff6a</l7:Id>
    ....

     

    2) Call to get the Identity provider ID for the user:
    https://<gateway FQDN>:8443/restman/1.0/users?login=foo
    ...
    <l7:Resource>
    <l7:User providerId="0000000000000000fffffffffffffffe"...

     

    3) Update the Assignment by using a PUT method with application/xml as the Content-type
    Payload: https://<gateway FQDN>:8443/restman/1.0/roles/0000000000000000ffffffffffffff6a/assignments
    Sample Template:https://<gateway FQDN>:8443/restman/1.0/roles/0000000000000000ffffffffffffff6a/assignments/template/addassignments

     

    <l7:AddAssignmentsContext xmlns:l7="http://ns.l7tech.com/2010/04/gateway-management">
                <l7:assignments>
                    <l7:assignment>
                        <l7:providerId>0000000000000000fffffffffffffffe</l7:providerId>
                        <l7:identityName>Foo</l7:identityName>
                        <l7:entityType>User</l7:entityType>
                    </l7:assignment>
                </l7:assignments>
    </l7:AddAssignmentsContext>

     

     

    Sincerely,

     

    Stephen Hughes

    CA Support



  • 4.  Re: Configure Operator Role without Policy Manager

    Posted 10-29-2018 11:06 AM

    Hi 

    Did the answer from Stephen answered your question? If it did please mark it as the right answer.
    When your question is not answered or you still have additional questions please let us know.

    With Kind Regards
    Dirk