Example

Users of our app can have the following permissions:

• domain.delete_domain
• domain.dns.create_record
• domain.dns.read_record
• domain.dns.update_record
• domain.dns.delete_record
• domain.create_domain
• domain.read_domain
• domain.update_domain

Sign into your dashboard. - For Roles, navigate to the Authorization/Roles. Default when navigating to Authorization. - For Permissions, navigate to the Authorization/Permissions.

Create them in your Authorization/Permissions page. Use the button in the upper right. + New permission

We define the following roles:

• admin: An admin can do everything.
• dns.manager: Can create, read, update and delete dns records but not access the domain itself.
• read-only: Can read domain or dns record information.

Create them in your Authorization/Roles page. Use the button in the upper right. + New role

For each role, we need to connect the permissions it should have.

admindns.managerread-only

Now that we have permissions and roles in place, we can connect them to keys.

DashboardAPI

1. In the sidebar, click on one of your keyspaces

2. Next click on keys in the expanded keyspace you selected.

   

3. On the key you want to use, click on the action menu (...) at the end of that table row.

4. Select Manage roles and permissions...

5. You can connect a role to your key by using the Assign role input. Let's give this key the dns.manager and read-only roles.

As you can see, the key now contains 2 roles and 5 permissions shown just above the Roles section:

Now you can verify this key and perform permission checks. Read more