Skip to main content

role_permissions

Creates, updates, deletes, gets or lists a role_permissions resource.

Overview​

Namerole_permissions
TypeResource
Idovh.dbaas_logs.role_permissions

Fields​

The following fields are returned by SELECT queries:

successful operation

NameDatatypeDescription
alias_idstring (uuid)Associated Elasticsearch alias (wire: aliasId)
dashboard_idstring (uuid)Associated Graylog dashboard (wire: dashboardId)
index_idstring (uuid)Associated Elasticsearch index (wire: indexId)
osd_idstring (uuid)Associated OpenSearch Dashboards instance (wire: osdId)
permission_idstring (uuid)Permission ID (wire: permissionId)
stream_idstring (uuid)Associated Graylog stream (wire: streamId)
permission_typestringPermission type (READ_ONLY, READ_WRITE) (wire: permissionType)

Methods​

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectpermission_id, role_id, service_nameReturns the role permission. (Deprecated, will be removed)
listselectrole_id, service_namex_pagination_modeReturns the role permissions of the Logs Data Platform service. (Deprecated, will be removed)
deletedeletepermission_id, role_id, service_nameDeletes the role permission. (Deprecated, will be removed)
aliasexecroleId, serviceName, aliasIdGrants the role permission on an alias. (Deprecated, will be removed)
dashboardexecroleId, serviceName, dashboardIdGrants the role permission on a dashboard. (Deprecated, will be removed)
indexexecroleId, serviceName, indexIdGrants the role permission on an index. (Deprecated, will be removed)
osdexecroleId, serviceName, osdIdGrants the role permission on an OpenSearch Dashboards instance. (Deprecated, will be removed)
streamexecroleId, serviceName, streamIdGrants the role permission on a data stream. (Deprecated, will be removed)

Parameters​

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
api_hoststringThe OVHcloud API host. Selected by OVH_ENDPOINT (ovh-eu, ovh-ca or ovh-us; default ovh-eu). (default: api.eu.ovhcloud.com, x-stackQL-envVarSelector: {"envVar":"OVH_ENDPOINT","default":"ovh-eu","values":{"ovh-eu":"api.eu.ovhcloud.com","ovh-ca":"api.ca.ovhcloud.com","ovh-us":"api.us.ovhcloud.com"}})
permission_idstring (uuid)Permission ID (wire: permissionId)
roleIdstring (uuid)Role ID
role_idstring (uuid)Role ID (wire: roleId)
serviceNamestringService name
service_namestringService name (wire: serviceName)
x_pagination_modestringSent as CachedObjectList-Pages by default so the list returns the full objects rather than their identifiers. (wire: X-Pagination-Mode)

SELECT examples​

Returns the role permission. (Deprecated, will be removed)

SELECT
alias_id,
dashboard_id,
index_id,
osd_id,
permission_id,
stream_id,
permission_type
FROM ovh.dbaas_logs.role_permissions
WHERE permission_id = '{{ permission_id }}' -- required
AND role_id = '{{ role_id }}' -- required
AND service_name = '{{ service_name }}' -- required
;

DELETE examples​

Deletes the role permission. (Deprecated, will be removed)

DELETE FROM ovh.dbaas_logs.role_permissions
WHERE permission_id = '{{ permission_id }}' --required
AND role_id = '{{ role_id }}' --required
AND service_name = '{{ service_name }}' --required
;

Lifecycle Methods​

EXEC variables use wire (API) names.

Grants the role permission on an alias. (Deprecated, will be removed)

EXEC ovh.dbaas_logs.role_permissions.alias
@roleId='{{ roleId }}' --required,
@serviceName='{{ serviceName }}' --required
@@json=
'{
"aliasId": "{{ aliasId }}"
}'
;