RAM user group/Roles creation
Hi,
Currently our RAM security model is designed in such a way that for every new Project/App Team that want to use RAM for asset management, we create:
4 User Groups - eg <Project> Build Engineers, <Project> Deployment Engineers
5 Roles - eg <Project> Producer, <Project> Consumer
And also we are using constraints like Asset Type/Asset Category to ensure that appropriate people have access to the relevant assets.
Now creation of these User groups/Roles is all manual and prone to human errors as we create them manually everytime. Our issue is - can this activity of creating User Groups and Roles be automated (including constraints).
Have been playing around with RAM java API and had some success in creating category schemas/user groups/roles but no luck with constraints and some fine grain stuff like role ids, role permissions etc. any solution is much appreciated. we are using RAM v7.5
Currently our RAM security model is designed in such a way that for every new Project/App Team that want to use RAM for asset management, we create:
4 User Groups - eg <Project> Build Engineers, <Project> Deployment Engineers
5 Roles - eg <Project> Producer, <Project> Consumer
And also we are using constraints like Asset Type/Asset Category to ensure that appropriate people have access to the relevant assets.
Now creation of these User groups/Roles is all manual and prone to human errors as we create them manually everytime. Our issue is - can this activity of creating User Groups and Roles be automated (including constraints).
Have been playing around with RAM java API and had some success in creating category schemas/user groups/roles but no luck with constraints and some fine grain stuff like role ids, role permissions etc. any solution is much appreciated. we are using RAM v7.5
One answer
What I am about to tell you is "not supported" per sea ... so consider this as a disclaimer.
That said, ... Community "0" in RAM is used as a prototype for when you create a new community for certain thing - including roles/groups.
... so go to the Administration page, and click on one of the communities.
replace the url ending with ....gid=1037 to gid=0
You will now be editing Community "0"
You can remove the Producer/Consumer roles, and create the Build, Dep .... roles ... for new communities, RAM will duplicate these.
That said, ... Community "0" in RAM is used as a prototype for when you create a new community for certain thing - including roles/groups.
... so go to the Administration page, and click on one of the communities.
replace the url ending with ....gid=1037 to gid=0
You will now be editing Community "0"
You can remove the Producer/Consumer roles, and create the Build, Dep .... roles ... for new communities, RAM will duplicate these.