Merge pull request #6989 from hasuniea/master

adding role based access control
wso2 · Nov 20, 2023 · 115b66f · 115b66f
2 parents 026ff10 + 6a1af01
commit 115b66f
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 1 deletion.
diff --git a/en/docs/administer/advanced-configurations.md b/en/docs/administer/advanced-configurations.md
@@ -1,4 +1,4 @@
-# Advanced Configurations
+# **Advanced Configurations**
 
 This section covers how to change and configure several features related to the advanced tenant configurations.
 

diff --git a/en/docs/administer/role-based-access-control.md b/en/docs/administer/role-based-access-control.md
@@ -0,0 +1,13 @@
+# **Role based access control for Admin Portal**
+
+Super admin can restrict each section in the admin portal based on the scopes. Please follow the
+below scopes  chart to define scopes.
+
+| **Admin portal Menu**  | **scopes**                                                                                                                                   |
+|------------------------|----------------------------------------------------------------------------------------------------------------------------------------------|
+| Rate Limiting Policies | apim:admin_tier_view, apim:admin_tier_manage,  apim:tenantInfo, apim:bl_view, apim:bl_manage, apim:admin_settings         |
+| Gateways               | apim:environment_manage, apim:admin_settings, apim:environment_read                                                                          |
+| API Categories         | apim:api_category, apim:tenantInfo, apim:admin_settings                                                                                      |
+| Key Managers           | apim:keymanagers_manage, apim:tenantInfo, apim:admin_settings                                                                                |
+| Tasks                  | apim:api_workflow_view, apim:api_workflow_approve, apim:tenantInfo, apim:admin_setting                                                       |
+| Settings               | apim:app_owner_change, apim:admin_application_view, apim:scope_manage, apim:admin_settings, apim:tenantInfo          |
diff --git a/en/mkdocs.yml b/en/mkdocs.yml
@@ -1386,6 +1386,7 @@ nav:
             - Configure ForgeRock as a Key Manager: administer/key-managers/configure-forgerock-connector.md
             - Configure a Custom Key Manager: administer/key-managers/configure-custom-connector.md
         - Advanced Configurations: administer/advanced-configurations.md
+        - Manage Role based access control for the Admin portal: administer/role-based-access-control.md
     - Install and Setup:
         - Install and Setup Overview: install-and-setup/install-and-setup-overview.md
         - Install: