RBAC Best Practice

Last modified 12 Nov 2021 16:57 +01:00

Do not create role that correspond to a single resource, such as "AD" or "Oracle". This is usually pointless. If you really want to assign just this one resource then use direct construction assignment and outbound mappings. If you want to create a role create something more generic such as "Basic Role" or "Employee". Even though it may really contain only one resource at the beginning it can be extended with more resources and logic later.

Was this page helpful?
Thanks for your feedback