PUT /resourceAccessControl

Use this method to modify the current access-control settings.

Note: Only users with lxc-supervisor or lxc-security-admin authority can modify the access-control settings.

Authentication

Authentication with user name and password is required.

Request URL

PUT https://{management_server_IP}/resourceAccessControl

Query parameters

None

Request body

Attributes Required / Optional Type Description
defaultRoleGroups Optional Array of strings List of role groups that are authorized by default to view and manage all devices when the devices are initially managed.

After a device is managed by Lenovo XClarity Administrator, you can change the authorized role groups for that device. (see PUT /chassis/{uuid}, PUT /nodes/{uuid}, PUT /storage/{uuid}, and PUT /storage/{uuid}).

publicAccess Optional Boolean Indicates whether the resource can be accessed by all role groups. This can be one of the following values.
  • true. The resource is can be access by all role group.

  • false. The resource is restricted to specific role groups .

resourceAccessControlEnabled Optional Boolean Indicates whether access control is enabled. This can be one of the following values.
  • true. Access control is enabled

  • false. Access control is disabled

The following example disables access control.
{
   "resourceAccessControlEnabled": false
}
The following example enables access control and sets the default role groups for all devices.
{
   "resourceAccessControlEnabled": true,
   "defaultRoleGroups": ["lxc-hw-admin","lxc-os-admin"]
}

Response codes

Code Description Comments
200 OK The request completed successfully.
400 Bad Request A query parameter or request attribute is missing or not valid, or the operation is not supported. A descriptive error message is returned in the response body.
401 Unauthorized The user cannot be authenticated. Authentication has not been provided or has failed. A descriptive error message is returned in the response body.
403 Forbidden The orchestrator server was prevented from fulfilling the request. A descriptive error message is returned in the response body. Ensure that you have privileges to perform the request.
404 Not found A specified resource cannot be found. A descriptive error message is returned in the response body.
409 Conflict There is a conflict with the current state of the resource. A descriptive error message is returned in the response body.
500 Internal Server Error An internal error occurred. A descriptive error message is returned in the response body.

Response body

None