Skip to content
Arnab Dutta edited this page Jun 7, 2023 · 6 revisions

Overview

The Admin menu user interface has sub-menus to access features like Role and Permission, Custom Scripts and MAU graph.

Role and Permission Management

The administrator can control user access to pages and features of Admin UI by adding or removing the permissions mapped to the user's role.

Admin UI Role

The logged-in administrator can create, edit or destroy Admin UI Roles using the Admin UI Roles Page. The Admin UI Role can be assigned to the user using the User Management feature of this GUI. After installation, the following Roles can be seen on Admin UI: api-viewer, api-editor, api-manager and api-admin. The default user of Admin UI i.e. admin is assigned with api-admin role. A user with one or more Admin UI Role(s) assigned will be able to log in to Admin UI.

image

Permissions (Scopes)

Admin UI uses Config API to manage and configure the Jans Auth server. Config API helps in configuring auth-server, users, fido2 and scim modules. The APIs of this rest application are protected using an authorization token containing the appropriate permissions (scopes). Admin UI has the feature to add, edit and delete the Permissions used to access the APIs (i.e. APIs used by Admin UI).

image

Role-Permission Mapping

The administrator can map the Admin UI Role(s) with one or more permissions using the Role-Permission Mapping page. The Role mapped with Permissions can be then assigned to the user to allow access to the corresponding pages and features of the GUI.

image

The below table lists the Permissions for access control of the features:

Permission Description
https://jans.io/oauth/config/attributes.readonly View Person attributes
https://jans.io/oauth/config/attributes.write Add/Edit Person attributes
https://jans.io/oauth/config/attributes.delete Delete Person attributes
https://jans.io/oauth/config/scopes.readonly View the Scopes
https://jans.io/oauth/config/scopes.write Add/Edit Scopes
https://jans.io/oauth/config/scopes.delete Delete Scopes
https://jans.io/oauth/config/scripts.readonly View the Scripts
https://jans.io/oauth/config/scripts.write Add/Edit Scripts
https://jans.io/oauth/config/scripts.delete Delete Scripts
https://jans.io/oauth/config/openid/clients.readonly View the Clients
https://jans.io/oauth/config/openid/clients.write Add/Edit Clients
https://jans.io/oauth/config/openid/clients.delete Delete Clients
https://jans.io/oauth/config/smtp.readonly View SMTP configuration
https://jans.io/oauth/config/smtp.write Edit SMTP configuration
https://jans.io/oauth/config/smtp.delete Remove SMTP configuration
https://jans.io/oauth/config/logging.readonly View Auth server log configuration
https://jans.io/oauth/config/logging.write Edit Auth server log configuration
Clone this wiki locally