Rbac class add_roles policy

Adds one or multiple roles to a subject.

Type: rule policy.

Syntax

add_roles: {source: SourceSid, target: TargetSid, roles: Roles}

In this case:

• SourceSid – handle of the initiating subject.

  This can be blank. In this case, source_type: @any and source_role: @any must be indicated in the corresponding configuration rule.

• TargetSid – handle of the target subject.
• Roles – list of added roles.

Returned value

KSS_GRANT if roles were added.

KSS_DENY if roles were not added.

Page top