create-role-mapping

Estimated time to read: 1 minute

Experimental-feature notice

This page discusses experimental features. Experimental features are still in progress, and you may encounter bugs or unexpected behavior when using them.

If you experience an issue or want to know more about this feature's status, reach out to us at Era Software.

This command creates a role mapping given a name and list of roles.

Warning

This command requires the security database permission.

usage: eractl rbac create-role-mapping [-h] [--url URL] [--key KEY] name roles

positional arguments:
  name        Name of the role mapping to create
  roles       Comma-delimited list of roles to map name to

optional arguments:
  -h, --help  show this help message and exit
  --url URL   EraSearch URL, set via environment with ERACTL_URL (default: http://localhost:9200)
  --key KEY   EraSearch API key, set via environment with ERACTL_API_KEY (default: None)

To run:

eractl rbac create-role-mapping $NAME $ROLES --url https://erasearch.example.com --key ******

Or to pass arguments from the environment:

export ERACTL_URL="https://erasearch.example.com"
export ERACTL_API_KEY="******"
eractl rbac create-role-mapping $NAME $ROLES

Examples¶

To create a role mapping called log-admin that maps to the logstash-admin, cloudapp-login, kube-log-admin roles, use:

eractl rbac create-role-mapping log-admin logstash-admin,cloudapp-login,kube-log-admin

Last update: January 24, 2023