ctera.ctera.ctera_portal_directory_services_access_control (2.2.17) — module

CTERA Portal directory services access control rules

Authors: Saimon Michelson (@saimonation), Ygal Blum (@ygalblum)

preview | supported by community

Install collection

Install with ansible-galaxy collection install ctera.ctera:==2.2.17


Add to requirements.yml

  collections:
    - name: ctera.ctera
      version: 2.2.17

Description

Set access control rules for domain users and groups

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Set domain access control rules
  ctera_portal_directory_services_access_control:
    acl:
      - { principal_type: 'group', domain: 'demo.local', name: 'support', role: 'ReadWriteAdmin' }
      - { principal_type: 'user', domain: 'demo.local', name: 'jsmith', perm: 'EndUser' }
    ctera_host: "{{ ctera_portal_hostname }}"
    ctera_user: "{{ ctera_portal_user }}"
    ctera_password: "{{ ctera_portal_password }}"
    ctera_trust_certificate: True

Inputs

    
acl:
    description: List of Access Control Entries
    elements: dict
    suboptions:
      domain:
        description: The domain name
        required: true
        type: str
      name:
        description: The name of the domain user or group
        required: true
        type: str
      principal_type:
        choices:
        - group
        - user
        description: The type of entry (domain user or group)
        required: true
        type: str
      role:
        choices:
        - ReadWriteAdmin
        - ReadOnlyAdmin
        - Support
        - EndUser
        - Disabled
        description: The role
        required: true
        type: str
    type: list

state:
    choices:
    - present
    - absent
    default: present
    description:
    - Whether the specified access control rule should exist or not.
    type: str

tenant:
    description:
    - Name of the tenant.
    - For Global Admin operations set to "$admin"
    - Use default if not provided.
    - Do not set for initialization operations
    type: str