Dev Portal developer RBAC

Uses: Dev Portal

Enable developer RBAC

To use RBAC, you need to enable it from your Dev Portal settings:

In Konnect, click Dev Portal in the sidebar.
Click your Dev Portal.
Click Settings in the sidebar.
Click the Security tab.
Enable Role-based access control (RBAC).
Click Save changes.

Send a POST request to the /portals/{portalId}/teams endpoint:

curl -X POST "https://us.api.konghq.com/v3/portals/$PORTAL_ID/teams" \
     --no-progress-meter --fail-with-body  \
     -H "Authorization: Bearer $KONNECT_TOKEN" \
     --json '{
       "name": "IDM - Developers",
       "description": "The Identity Management (IDM) team"
     }'

Copied!

Use the konnect_portal_team resource:

echo '
resource "konnect_portal_team" "my_portalteam" {
  description = "The Identity Management (IDM) team."
  name        = "IDM - Developers"
  portal_id   = "f32d905a-ed33-46a3-a093-d8f536af9a8a"
}
' >> main.tf

Copied!

Manage developer RBAC

You can manage developers, application registrations, and teams from the Access and approvals tab in your Dev Portal.

To assign roles to developers, you need to create a team and add them to it:

In Konnect, click Dev Portal in the sidebar.
Click your Dev Portal.
Click Access and approvals in the sidebar.
Click the Teams tab.
Click New Team.
Enter a team name in the Team field.
Enter a team description in the Description field.
Click Save.
Click the name of your new team.
Click Add developer.
Select a developer from the Select one or more developer dropdown menu.
Click the APIs tab.
Click Add role.
Select an API from the API dropdown menu.
Select a role from the Add roles dropdown menu. You can set a role for all APIs on the Dev Portal, or set different roles for specific APIs. The following roles are available:
- API Consumer: This role allows developers on the team to make calls to the selected APIs.
- API Viewer: This role gives developers on the team read-only access to the selected APIs’ documentation.
To enable application sharing, do the following:
1. Click the Settings tab.
2. Enable Allow team to own applications.
  
  Developers will now see an option to assign new applications to one of their teams during the creation process. Only teams that are allowed to own applications will be listed. They can also transfer ownership of existing applications to their teams. For more information on the developer experience, see Dev Portal developer sign-up.
To transfer application ownership to either a developer or team, do the following:
1. Click Access and approvals in the sidebar.
2. Click the App registrations tab.
3. Click the application you want to transfer ownership of.
4. From the Actions dropdown menu, select “Transfer ownership”.

Assign a developer to a team by sending a POST request to the /portals/{portalId}/teams/{teamId}/developers endpoint:

curl -X POST "https://us.api.konghq.com/v3/portals/$PORTAL_ID/teams/$TEAM_ID/developers" \
     --no-progress-meter --fail-with-body  \
     -H "Authorization: Bearer $KONNECT_TOKEN" \
     --json '{
       "id": "'$DEVELOPER_ID'"
     }'

Copied!

Add a role to the team by sending a POST request to the /portals/{portalId}/teams/{teamId}/assigned-roles endpoint:

curl -X POST "https://us.api.konghq.com/v3/portals/$PORTAL_ID/teams/$TEAM_ID/assigned-roles" \
     --no-progress-meter --fail-with-body  \
     -H "Authorization: Bearer $KONNECT_TOKEN" \
     --json '{
       "role_name": "API Viewer",
       "entity_id": "'$API_ID'",
       "entity_type_name": "'$API_NAME'",
       "entity_region": "us"
     }'

Copied!

The following roles are available:

API Consumer: This role allows developers on the team to make calls to the selected APIs.
API Viewer: This role gives developers on the team read-only access to the selected APIs’ documentation.

Dev Portal developer RBAC

Enable developer RBAC

Manage developer RBAC

Help us make these docs great!

Still need help?