ConfigureComponents

Hi,

I got your point and it will not be able to access any ManagerAccount resources when configured with ConfigureComponents. But we have below definition for Action Info


"Entity": "ActionInfo",

"OperationMap": {

"GET": [

{

"Privilege": [

"Login"

]

}

],

"HEAD": [

{

"Privilege": [

"Login"

]

}

],

"PATCH": [

{

"Privilege": [

"ConfigureManager"

]

}

],

"PUT": [

{

"Privilege": [

"ConfigureManager"

]

}

],

"DELETE": [

{

"Privilege": [

"ConfigureManager"

]

}

],

"POST": [

{

"Privilege": [

"ConfigureManager"

]

}

]

}

}

Can we provide response of Actioninfo eventhough the user has role as ConfigureComponents only? Since this is providing response of Action and login was success, then showing the response may not break compliance. Please explain the scenario of creating a role with only AssignedPrivileges as ConfigureComponents only  




"AssignedPrivileges": [





"ConfigureComponents"







]

Then create Account by assigning this roleid(ConfigureComponents only).  

Is it possibe to use this account to get actioninfo resources(get /redfish/v1/Systems/Self/ResetActionInfo)

Thanks,
Mani