. . .

Supporter Role

Introduction

Since ApiOmat 3.3.1 you can assign customers to be supporters using the SuperAdmin account. A supporter is basically a customer with a special role that incorporates certain, statically assigned roles for monitoring Yambas itself (health check, read oplog, read cluster information), application logs as well as any module, application and the data of any application. At the moment there is only one supporter role defined which incorporates all READ roles that can be assigned to a customer. Currently a supporter is allowed to READ all data regardless of which application, customer or organization the data belongs to. The supporter may only perform WRITE operations on entities owned by itself. You may consider the supporter a "read only SuperAdmin".

Assigning Supporters

Currently supporters can be assigned via ApiDocs by calling POST yambas/rest/customers/{customerName}/grantSpecificAccess with specificRole=SUPPORT or directly via curl:

curl -X POST -u SuperAdmin:<password> -d 'specificRole=SUPPORT' 'http://<yourinstance>/yambas/rest/customers/<customerName>/grantSpecificAccess'

Note that you have to replace <password>, <yourinstance> and <customerName> with the correct values

Revoke Supporters

You can revoke the supporter role by calling POST yambas/rest/customers/{customerName}/revokeSpecificAccess with specificRole=SUPPORT or directly via curl:

curl -X POST -u SuperAdmin:<password> -d 'specificRole=SUPPORT' 'http://<yourinstance>/yambas/rest/customers/<customerName>/revokeSpecificAccess'

Note that you have to replace <password>, <yourinstance> and <customerName> with the correct values

Actions possible

  • Read Customers and Organizations

    • Read Applications per Customer

  • Read Applications

  • Read Modules

    • Read Module configuration

    • Read Metamodels

    • Read Datamodels

    • Read Static Data

  • Read UserInterfaces

  • Read logs and auditlogs

  • Perform healthcheck

  • Read cluster information