Used to manage role security permissions.
Command
secperms [-r ROLE] [-a PERMISSIONS...] [-d PERMISSIONS...]
Parameters
| Flag | Description |
| -r | Role name. Required for adding or deleting permissions. If specified without -a or -d, command will list role’s current permissions. Omit -r, -a, and -d to list all permissions. |
| -a | Permissions to add to role. May specify multiple permissions separated by spaces, for example:
-a permission.browserAccess permission.content.view Cannot be used in conjunction with the -d option. |
| -d | Permissions to remove from role. May specify multiple permissions separated by spaces, for example:
-d permission.browserAccess permission.content.view Cannot be used in conjunction with the -a option. |
Examples
– Lists all security permissions:
bin/es-cli.sh --user admin --pass admin secperms
Response:
["permission.content.invokeActions","permission.content.edit","permission.archives.restore","permission.system.viewAbout","permission.themes","permission.archives.delete.full","permission.content","permission.system.sessions","permission.archives.backup.partial","permission.provisioning.defaults","permission.provisioning","permission.system.cluster","permission.system.license","permission.archives","permission.clientFilters","permission.system.viewSystemInfo","permission.ruleSets","permission.mapLayers","permission.content.view","permission.changeOwnPassword","permission.debug","permission.archives.restore.partial","permission.system.jobStatus","permission.colorPalettes","permission.archives.backup.full","permission.rpa.play","permission.constraints","permission.pipeline.edit","permission.pipeline","permission.provisioning.domains.content","permission","permission.browserAccess","permission.rpa.record","permission.system.viewLogs","permission.rpa","permission.archives.delete.partial","permission.provisioning.domains.accounts","permission.extensions","permission.archives.delete","permission.pipeline.view","permission.archives.restore.full","permission.archives.backup","permission.system","permission.provisioning.domains"]
– Lists a specific role’s current permissions:
bin/es-cli.sh --user admin --pass admin secperms -r Editor
Response:
["permission.content","permission.pipeline"]
– Adds specified permissions to a role:
bin/es-cli.sh --user admin --pass admin secperms -r Editor -a permission.browserAccess permission.provisioning
Response:
["permission.provisioning","permission.browserAccess"]
– Removes specified permission from role:
bin/es-cli.sh --user admin --pass admin secperms -r Editor -d permission.browserAccess