Resource rules

Permit access to resources matching the filter tags and permissions.

Resource rule

Properties

Filter by tags

Apply permissions to resources that match all of the filter tags.

Each filter tag is used as a case insensitive regular expressions tested against resource tags. A disjunct filter can be created with regular expressions, for example serial port|compute.

Leave empty to match all resources.

  • Data type: string list
  • Configuration

CLI: (cli)> config auth group <key> resource <index> tags

Administration permission

Match resources that are tagged with the Administration permission. Administration resources allow management of the device using the CLI and web interface.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth group <key> resource <index> admin

Access permission

Match resources that are tagged with the Access permission. This includes resources such as serial ports, connected devices, compute resources, and storage.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth group <key> resource <index> access

Audit permission

Match resources that are tagged with the Audit permission. This includes resources such logs and read-only storage filesystems.

  • Data type: boolean
  • Default: true
  • Configuration

CLI: (cli)> config auth group <key> resource <index> audit