Skip to main content

otdfctl policy kas-grants assign

assign - Assign a grant

Synopsis

otdfctl policy kas-grants assign [flags]

Description

Assign a registered Key Access Server (KAS) to an attribute namespace, definition, or value.

For more information, see kas-registry and kas-grants manuals.

Example

Namespace grant:

otdfctl policy kas-grants assign --namespace-id 3d25d33e-2469-4990-a9ed-fdd13ce74436 --kas-id 62857b55-560c-4b67-96e3-33e4670ecb3b

Attribute grant:

otdfctl policy kas-grants assign --attribute-id a21eb299-3a7d-4035-8a39-c8662c03cb15 --kas-id 62857b55-560c-4b67-96e3-33e4670ecb3b

Attribute value grant:

otdfctl policy kas-grants assign --value-id 0a40b27c-6cc9-49e8-a6ae-663cac2c324b --kas-id 62857b55-560c-4b67-96e3-33e4670ecb3b

Options

-n, --namespace-id <namespace-id>: The ID of the Namespace being assigned a KAS Grant (required: false)

-a, --attribute-id <attribute-id>: The ID of the Attribute Definition being assigned a KAS Grant (required: true)

-v, --value-id <value-id>: The ID of the Value being assigned a KAS Grant (required: true)

-k, --kas-id <kas-id>: The ID of the Key Access Server being assigned to the grant (required: true)

-l, --label <label>: Optional metadata 'labels' in the format: key=value (required: false)

--force-replace-labels <force-replace-labels>: Destructively replace entire set of existing metadata 'labels' with any provided to this command (required: false)

Aliases

u, update, create, add, new, upsert

Example