Module kanidmd_lib::constants::groups

Structs

• BUILTIN_GROUP_ACCESS_CONTROL_ADMINS
• BUILTIN_GROUP_ACCOUNT_POLICY_ADMINS
• BUILTIN_GROUP_APPLICATION_ADMINS
• BUILTIN_GROUP_CLIENT_CERTIFICATE_ADMINS_DL7
  Builtin IDM Group for managing client authentication certificates.
• BUILTIN_GROUP_DOMAIN_ADMINS
  Builtin IDM Group for granting local domain administration rights and trust administration rights
• BUILTIN_GROUP_IDM_ADMINS_V1
• BUILTIN_GROUP_MAIL_SERVICE_ADMINS_DL8
• BUILTIN_GROUP_OAUTH2_ADMINS
  Builtin IDM Group for managing oauth2 resource server integrations to this authentication domain.
• BUILTIN_GROUP_PEOPLE_ADMINS
  Builtin IDM Group for managing persons and their account details
• BUILTIN_GROUP_PEOPLE_ON_BOARDING
• BUILTIN_GROUP_PEOPLE_PII_READ
  Builtin IDM Group for granting elevated people (personal data) read permissions.
• BUILTIN_GROUP_PEOPLE_SELF_NAME_WRITE_DL7
  Builtin IDM Group for granting people the ability to write to their own name attributes.
• BUILTIN_GROUP_RADIUS_SERVICE_ADMINS
• BUILTIN_GROUP_RECYCLE_BIN_ADMINS
• BUILTIN_GROUP_SCHEMA_ADMINS
• BUILTIN_GROUP_SERVICE_ACCOUNT_ADMINS
• BUILTIN_GROUP_SERVICE_DESK
• BUILTIN_GROUP_SYSTEM_ADMINS_V1
• BUILTIN_GROUP_UNIX_ADMINS
  Builtin IDM Group for managing posix/unix attributes on groups and users.
• BUILTIN_IDM_MAIL_SERVERS_DL8
  Builtin IDM Group for MAIL server Access delegation.
• BUILTIN_IDM_RADIUS_SERVERS_V1
  Builtin IDM Group for RADIUS server access delegation.
• BuiltinGroup
  Built-in group definitions
• IDM_ACCOUNT_MAIL_READ
  Members of this group will have access to read the mail attribute of all persons and service accounts.
• IDM_ALL_ACCOUNTS
• IDM_ALL_PERSONS
• IDM_GROUP_ADMINS_V1
  Builtin IDM Group for granting elevated group write and lifecycle permissions.
• IDM_HIGH_PRIVILEGE_DL7
  This must be the last group to init to include the UUID of the other high priv groups.
• IDM_HIGH_PRIVILEGE_V1
  This must be the last group to init to include the UUID of the other high priv groups.
• IDM_PEOPLE_SELF_MAIL_WRITE_DL7
  Self-write of mail
• IDM_PEOPLE_SELF_WRITE_MAIL_V1
  Self-write of mail
• IDM_UI_ENABLE_EXPERIMENTAL_FEATURES

Functions

• idm_builtin_admin_groups
• idm_builtin_non_admin_groups
  Make a list of all the non-admin BuiltinGroup’s that are created by default, doing it in a standard-ish way so we can use it around the platform