Custom roles for manager account | Redfish Specification Forum

fish
Guppy

Posts: 65

Custom roles for manager account Nov 28, 2017 12:42:49 GMT

Quote

Post by fish on Nov 28, 2017 12:42:49 GMT

Hi,

I'm having problem to understand how to use custom (OEM) roles for a manager account.
Handling of accounts and roles seems to be specified in section 9.2.8 “Privilege model/Authorization” (DSP0266 v1.3.0).

If I want to use a custom role, why would I need to create the account with a predefined role first, and after this update it to a custom role directly after?
(Or is there some other way?) See text from specification below:

- "This specification defines a set of predefined roles, one of which shall be assigned to a user when a user is created."
(I assume that "user" in text above refers to the manager accounts in the AccountService. OK?)

Or should it be OK to create an account directly with a custom/OEM role?
If so, maybe the specification text above needs to be rephrased/clarified?

jautor
Administrator

Posts: 502

Custom roles for manager account Nov 29, 2017 0:41:34 GMT

Quote

Post by jautor on Nov 29, 2017 0:41:34 GMT

That does sound like a statement that was made in the specification before the concept of the custom/OEM role was added. I'll take this back to the group and get an opinion, but in my view you should be able to create a user with an assigned OEM role - not have to create and then modify it.

Jeff

fish
Guppy

Posts: 65

Custom roles for manager account Nov 29, 2017 7:40:40 GMT

Quote

Post by fish on Nov 29, 2017 7:40:40 GMT

Nov 29, 2017 0:41:34 GMT jautor said:

That does sound like a statement that was made in the specification before the concept of the custom/OEM role was added. I'll take this back to the group and get an opinion, but in my view you should be able to create a user with an assigned OEM role - not have to create and then modify it.

Jeff

OK, thanks!