解决了

棱镜中央RBAC作业

  • 2020年9月24日
  • 8回复
  • 1823年观点
S.
徽章 +1

大家好，

我最近部署了棱镜中心，我试图通过他们的广告账户给予团队成员。我经历了角色，发现我无法将新成员添加到预定义角色;但是，如果我复制了角色，我可以将广告用户和组添加到新角色。然而，当我复制诸如“超级管理员”角色的角色时，这对我来说作用，我警告说明并非所有权限都适用于新角色，我需要通过CLI创建新角色来获取这些权限。好的很好，有一种感觉。但是如何做到的文件在哪里？有人可以指出我通过CLI执行这些角色创建任务的文档吗？

谢谢，斯科特

图标

最好的答案Alona2020年10月16日，06:56

Are you able to log a Nutanix Support request?\u00a0 I believe this is a bug and an Engineering case will have more attention when it is directly associated with a customer case. Let me know if you log a support case, please, and I will grab the case number from you.<\/p>","className":"post__content__best_answer"}">
查看原版
Hello All,<\/p>

I have recently deployed Prism Central and I am trying to give team members access via their AD accounts. I have went through the roles and discovered I cannot add new members to the predefined roles; however, if I duplicate the roles I can add AD users and groups to the new roles. This works for me however when I duplicate a role such as the \u201cSuper Admin\u201d role I am warned that not all permissions are going to apply to the new role and I would need to create the new role via CLI to get these permissions. Ok fine that makes some sense. But where is the documentation on how to do that? Can someone point me to the documentation to perform these role creation tasks via CLI?<\/p>

Thanks, Scott<\/p>

\u00a0<\/p>","quoteUsername":"skeeter","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

此主题已关闭征询意见

8回复

R.
秩
UserLevel 2.
徽章 +3

我建议检查文档并搜索相关配置：控制用户访问（RBAC）

Alona
秩
UserLevel 6.
徽章 +5

嗨Skeeter，

如果您在编辑没有声音的现有角色映射时遇到问题，则需要通过Nutanix支持来查看。

消息表明的是使用API​​。您可以直接与PC Web控制台一起玩API（单击右上角的用户名并选择API Explorer）或转到Nutanix dev.门户。

我将搜索使用API​​完成此任务的任何示例。现在我建议发布API社区的空间。

Hi skeeter,<\/p>

If you have trouble with editing an existing role mapping that does not sound right and would need to be looked at by Nutanix Support.<\/p>

What the message suggests is to use API. You can either play with APIs directly from PC Web Console (click on user name in the top right corner and choose API explorer) or go to Nutanix Dev<\/a> portal.<\/p>

\"//www.jhbzcj.com/next/installation-configuration-23/\"<\/figure>

I will search for any examples of completing this task with API. For now I\u2019d suggest posting in API <\/a>space of the community.<\/p>","quoteUsername":"Alona","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

S.
徽章 +1

好的，因为我在这里有一点混淆我会增加一些细节。所以我刚刚安装了棱镜中央，我试图将广告用户添加到棱镜中央建立的角色。当我点击超级管理角色时，这就是我所看到的：

如你所见，我不能添加任何人到它，但我可以复制的角色。当我复制这个角色时，我收到了Alona上面发布的消息。所以我不应该重复角色吗?我是否可以将用户添加到已经存在的角色?一旦我复制了角色，我可以添加我的AD帐户到复制的角色，但当然他们没有相同的权限。如果这是设计好的，我没有问题在API空间发布这个。

谢谢,

斯科特

Ok since I am getting a little confused here I add some more detail. So I have just installed Prism Central and I am trying to add AD users to the roles built into Prism Central. When I click on the super Admin role this is what I see:<\/p>
\"//www.jhbzcj.com/next/installation-configuration-23/\"<\/figure>

As you can see I cannot add anyone to it but I can duplicate the role. When I duplicated the role I got the message that Alona posted above. So am I not supposed to duplicate roles? Should I be able to add users to the roles that already exist? Once I duplicated the role I can add my AD accounts to the duplicated role but of course they don\u2019t have the same permissions. I have no issues posting this in the API space if this is by design.<\/p>

\u00a0<\/p>

Thanks,<\/p>

Scott<\/p>","quoteUsername":"skeeter","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Alona
秩
UserLevel 6.
徽章 +5

我认为你想要做的是被称为角色映射。

角色是权限的列表。然后将该角色映射到用户或组。这被称为角色映射。这样做是为了允许您在多个用户和组中重用角色。

配置角色映射

如果要为某些用户分配SuperAdmin权限，则需要通过角色映射将超级MIN角色与用户关联。

让我知道是否有意义或者你是新的，但我误解了你。

S.
徽章 +1

这不是我想做的艾洛纳。如果我在角色映射下（如上面的屏幕截图所示），我只能提供查看器，用户管理员群集管理员。我想使用棱镜中心提供的更精细的角色。但是，正如您在屏幕拍摄中看到的，我无法使用棱镜中央中提供的默认角色进行任何角色映射。

我必须创造新的角色。但是，当我复制角色“超级管理员”时，我收到上面发布的邮件（从角色中复制了96个权限的82个。）。所以我只需要一个API参考页面向我展示如何使用API​​创建角色。

使用上面的图像，您可以看到我可以将我的广告用户和组映射到我创建的新角色。但是，由于缺少14个权限，新角色与默认超级管理角色不同。

This is not quite what I want to do Alona. If I go under role mapping (As shown in you screen shot above) I can only provide Viewer,User Admin, Cluster Admin. I want to use the more granular roles that are provided in Prism Central.\u00a0However, as you can see in my screen shot I cannot do any role mapping with the default roles provided in Prism Central.<\/p>
\"//www.jhbzcj.com/next/installation-configuration-23/\"<\/figure>

I have to create new roles. However, when I duplicate the role \u201cSuper admin\u201d I get the message you posted above (Copied 82 of 96 permissions from role\u2026.). So I just need a API reference page to show me how to create the roles with the API.\u00a0<\/p>

\u00a0<\/p>

\"//www.jhbzcj.com/next/installation-configuration-23/\"<\/figure>

With the above image you can see that I can map my AD users and groups to a new role I have created. However the new role is not the same as the default super admin role because of the missing 14 permissions.\u00a0<\/p>","quoteUsername":"skeeter","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Alona
秩
UserLevel 6.
徽章 +5

我为延迟道歉。感谢您提供详细信息。我能重现这个问题。只是确保我没有错过任何东西。会回复你。

My apologies for the delay. Thank you for providing the details. I was able to reproduce the issue. Just making sure that I am not missing anything. Will get back to you.<\/p>","quoteUsername":"Alona","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
Alona
秩
UserLevel 6.
徽章 +5

您是否能够记录Nutanix支持请求？我相信这是一个错误，当它与客户案件直接相关时，工程案例将更多地关注。请告诉我如果您登录支持案例，请您从您抓住案例编号。

Are you able to log a Nutanix Support request?\u00a0 I believe this is a bug and an Engineering case will have more attention when it is directly associated with a customer case. Let me know if you log a support case, please, and I will grab the case number from you.<\/p>","quoteUsername":"Alona","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
S.
徽章 +1

我已经记录了一个案例，我的案例编号是：00889500

I have logged a case and my case number is: 00889500<\/p>","quoteUsername":"skeeter","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
Baidu