@@ -42,3 +42,136 @@ Specify the action to restrict user access to the specific action.
4242| Manage Roles | Settings | iam:roles:* | /iam/v2/roles | https://{{< example_fqdn "automate" >}}/settings/roles |
4343| Manage Projects | Settings | iam:projects:* | /iam/v2/projects | https://{{< example_fqdn "automate" >}}/settings/projects |
4444{{% /responsive-table %}}
45+
46+ ## Infra Server View Actions
47+
48+ These are * IAM Actions* for different views and action in the ** Infra Server View** tab in Automate.
49+
50+ | Task | Method | IAM Action | API endpoint | URL |
51+ | ------| ---------- | --------- | ------------- | --------- |
52+ | List Infra Servers | GET | infra:infraServers: list | /api/v0/infra/servers | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers |
53+ | Get Infra Server | GET | infra:infraServers: get | /api/v0/infra/servers/{id} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id} |
54+ | Create Infra Server | POST | infra:infraServers: create | /api/v0/infra/servers | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers |
55+ | Update Infra Server | PUT | infra:infraServers: update | /api/v0/infra/servers/{id} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id} |
56+ | Delete Infra Server | DELETE | infra:infraServers: delete | /api/v0/infra/servers/{id} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id} |
57+ | List Orgs | GET | infra:infraServersOrgs: list | /api/v0/infra/servers/{server_id}/orgs | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs |
58+ | Get Org | GET | infra:infraServersOrgs: get | /api/v0/infra/servers/{server_id}/orgs/{id} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{id} |
59+ | Create Org | POST | infra:infraServersOrgs: create ,iam:projects: assign | /api/v0/infra/servers/{server_id}/orgs | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs |
60+ | Update Org | PUT | infra:infraServersOrgs: update | /api/v0/infra/servers/{server_id}/orgs/{id} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{id} |
61+ | Delete Org | DELETE | infra:infraServersOrgs: delete | /api/v0/infra/servers/{server_id}/orgs/{id} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{id} |
62+ | List Cookbooks | GET | infra:infraServersOrgsCookbooks: list | /api/v0/infra/servers/{server_id}/orgs/{org_id}/cookbooks | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/cookbooks |
63+ | Get Cookbooks | GET | infra:infraServersOrgsCookbooks: get | /api/v0/infra/servers/{server_id}/orgs/{org_id}/cookbooks/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/cookbooks/{name} |
64+ | List Roles | GET | infra:infraServersOrgsRoles: list | /api/v0/infra/servers/{id}/orgs/{org_id}/roles | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/roles |
65+ | Get Roles | GET | infra:infraServersOrgsRoles: get | /api/v0/infra/servers/{id}/orgs/{org_id}/roles/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/roles/{name} |
66+ | Create Roles | POST | infra:infraServersOrgsRoles: create | /api/v0/infra/servers/{id}/orgs/{org_id}/roles | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/roles |
67+ | Update Roles | PUT | infra:infraServersOrgsRoles: update | /api/v0/infra/servers/{id}/orgs/{org_id}/roles/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/roles/{name} |
68+ | Delete Roles | DELETE | infra:infraServersOrgsRoles: delete | /api/v0/infra/servers/{id}/orgs/{org_id}/roles/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/roles/{name} |
69+ | List Environments | GET | infra:infraServersOrgsEnvironments: list | /api/v0/infra/servers/{id}/orgs/{org_id}/environments | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/environments |
70+ | Get Environments | GET | infra:infraServersOrgsEnvironments: get | /api/v0/infra/servers/{id}/orgs/{org_id}/environments/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/environments/{name} |
71+ | Create Environments | POST | infra:infraServersOrgsEnvironments: create | /api/v0/infra/servers/{id}/orgs/{org_id}/environments | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/environments |
72+ | Update Environments | PUT | infra:infraServersOrgsEnvironments: update | /api/v0/infra/servers/{id}/orgs/{org_id}/environments/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/environments/{name} |
73+ | Delete Environments | DELETE | infra:infraServersOrgsEnvironments: delete | /api/v0/infra/servers/{id}/orgs/{org_id}/environments/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/environments/{name} |
74+ | Get DataBags | GET | infra:infraServersOrgsDataBags: get | /api/v0/infra/servers/{id}/orgs/{org_id}/data_bags | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/data_bags |
75+ | Create DataBags | POST | infra:infraServersOrgsDataBags: create | /api/v0/infra/servers/{id}/orgs/{org_id}/data_bags | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/data_bags |
76+ | Delete DataBags | DELETE | infra:infraServersOrgsDataBags: delete | /api/v0/infra/servers/{id}/orgs/{org_id}/data_bags/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{id}/orgs/{org_id}/data_bags/{name} |
77+ | Get DataBagItem | GET | infra:infraServersOrgsDataBagsItem: get | /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item} |
78+ | Create DataBagItem | POST | infra:infraServersOrgsDataBagsItem: create | /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name} |
79+ | Update DataBagItem | PUT | infra:infraServersOrgsDataBagsItem: update | /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item_id} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item_id} |
80+ | Delete DataBagsItem | DELETE | infra:infraServersOrgsDataBagsItem: delete | /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name}/{item} |
81+ | Delete DataBags | DELETE | infra:infraServersOrgsDataBags: delete | /api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name} | https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/data_bags/{name} |
82+ | Get PolicyFiles | GET | infra:infraServersOrgsPolicyFiles: get | /api/v0/infra/servers/{server_id}/orgs/{org_id}/policyfiles| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/policyfiles |
83+ | Delete PolicyFiles | DELETE | infra:infraServersOrgsPolicyFiles: delete | /api/v0/infra/servers/{server_id}/orgs/{org_id}/policyfiles/{name}| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/policyfiles/{name} |
84+ | Get PolicyGroups | GET | infra:infraServersOrgsPolicyGroups: get | /api/v0/infra/servers/{server_id}/orgs/{org_id}/policygroups/{name}| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/policygroups/{name} |
85+ | Get Client | GET | infra:infraServersOrgsClient: get | /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name}| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name} |
86+ | Create Client | POST | infra:infraServersOrgsClient: create | /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/clients |
87+ | Reset Client Key | PUT | infra:infraServersOrgsClient: update | /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name}/reset| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name}/reset |
88+ | Delete Client | DELETE | infra:infraServersOrgsClient: delete | /api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name}| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/clients/{name} |
89+ | Get Node | GET | infra:infraServersOrgsNodes: get | /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes |
90+ | Update Node | POST | infra:infraServersOrgsNodes: update | /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes |
91+ | Delete Node | DELETE | infra:infraServersOrgsNodes: delete | /api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes/{name}| https://{{< example_fqdn "automate" >}}/api/v0/infra/servers/{server_id}/orgs/{org_id}/nodes/{name} |
92+
93+ Three types of user policies automatically gets created when a project is created.
94+
95+ ### Infra Viewer Policy Actions
96+
97+ ```
98+ secrets:*:get,
99+ secrets:*:list,
100+ infra:*:get,
101+ infra:*:list,
102+ compliance:*:get,
103+ compliance:*:list,
104+ event:*:get,
105+ event:*:list,
106+ ingest:*:get,
107+ ingest:*:list,
108+ iam:projects:list,
109+ iam:projects:get,
110+ applications:*:get,
111+ applications:*:list
112+ ```
113+
114+ ### Infra Editor Policy Actions
115+
116+ ```
117+ infra:*:list,
118+ infra:*:get,
119+ infra:infraServersOrgsRoles:create,
120+ infra:infraServersOrgsRoles:update,
121+ infra:infraServersOrgsClient:create,
122+ infra:infraServersOrgsClient:update,
123+ infra:infraServersOrgsDataBags:create,
124+ infra:infraServersOrgsDataBagsItem:create,
125+ infra:infraServersOrgsDataBagsItem:update,
126+ infra:infraServersOrgsEnvironments:create,
127+ infra:infraServersOrgsEnvironments:update,
128+ infra:infraServersOrgsNodes:update,
129+ compliance:*,
130+ event:*,
131+ ingest:*,
132+ secrets:*,
133+ iam:projects:list,
134+ iam:projects:get,
135+ iam:projects:assign,
136+ applications:*
137+ ```
138+
139+ ### Infra Project Owner Policy Actions
140+
141+ ```
142+ infra:*:list,
143+ infra:*:get,
144+ infra:infraServersOrgsRoles:create,
145+ infra:infraServersOrgsRoles:update,
146+ infra:infraServersOrgsRoles:delete,
147+ infra:infraServersOrgsClient:create,
148+ infra:infraServersOrgsClient:update,
149+ infra:infraServersOrgsClient:delete,
150+ infra:infraServersOrgsDataBags:create,
151+ infra:infraServersOrgsDataBags:delete,
152+ infra:infraServersOrgsDataBagsItem:create,
153+ infra:infraServersOrgsDataBagsItem:update,
154+ infra:infraServersOrgsDataBagsItem:delete,
155+ infra:infraServersOrgsEnvironments:create,
156+ infra:infraServersOrgsEnvironments:update,
157+ infra:infraServersOrgsEnvironments:delete,
158+ infra:infraServersOrgsNodes:update,
159+ infra:infraServersOrgsNodes:delete,
160+ infra:infraServersOrgsPolicyFiles:delete,
161+ compliance:*,
162+ event:*,
163+ ingest:*,
164+ secrets:*,
165+ iam:projects:list,
166+ iam:projects:get,
167+ iam:projects:assign,
168+ iam:policies:list,
169+ iam:policies:get,
170+ iam:policyMembers:*,
171+ iam:teams:list,
172+ iam:teams:get,
173+ iam:teamUsers:*,
174+ iam:users:get,
175+ iam:users:list,
176+ applications:*
177+ ```
0 commit comments