Manage IICS roles. Roles group privileges and are assigned to users and user groups.
iics role <subcommand> [flags]| Subcommand | Description |
|---|---|
list |
List roles |
get |
Get a single role |
create |
Create a role |
update |
Update a role |
delete |
Delete a role |
| Flag | Type | Default | Description |
|---|---|---|---|
--limit |
int | 200 | Max results |
--skip |
int | 0 | Results to skip |
All global flags apply.
| Column | Description |
|---|---|
id |
Role ID |
name |
Role name |
systemRole |
Whether this is a built-in role |
description |
Role description |
iics role list
# List as JSON
iics role list --output json
# List only custom (non-system) roles
iics role list --output json | jq '.[] | select(.systemRole == false)'iics role list
# List as JSON
iics role list --output json
# List only custom (non-system) roles
$roles = iics role list --output json | ConvertFrom-Json
$roles | Where-Object { $_.systemRole -eq $false }| Flag | Type | Required | Description |
|---|---|---|---|
--id |
string | yes | Role ID |
All global flags apply.
iics role get --id <role-id>
# JSON to see all role fields including privileges
iics role get --id <role-id> --output jsoniics role get --id <role-id>
# JSON to see all role fields including privileges
iics role get --id <role-id> --output jsonCreate a role from a JSON definition file.
| Flag | Type | Required | Description |
|---|---|---|---|
--from-file |
string | yes | JSON file with role definition |
All global flags apply.
{
"name": "ETL Developer",
"description": "Can create and run mappings",
"privileges": [
{ "id": "<privilege-id>", "name": "dataIntegration.mapping.create" },
{ "id": "<privilege-id>", "name": "dataIntegration.mapping.run" }
]
}Use iics privilege list to find available privilege IDs.
iics role create --from-file etl-developer-role.jsoniics role create --from-file etl-developer-role.json| Flag | Type | Required | Description |
|---|---|---|---|
--id |
string | yes | Role ID |
--from-file |
string | yes | JSON file with updated fields |
All global flags apply.
iics role update --id <role-id> --from-file updated-role.jsoniics role update --id <role-id> --from-file updated-role.jsonDelete a role. Prompts for confirmation unless --yes is given.
| Flag | Short | Type | Required | Description |
|---|---|---|---|---|
--id |
string | yes | Role ID | |
--yes |
-y |
bool | Skip confirmation prompt |
All global flags apply.
iics role delete --id <role-id>
iics role delete --id <role-id> --yesiics role delete --id <role-id>
iics role delete --id <role-id> --yes
## See also
- [privilege](privilege.md) - list available privileges to assign to roles
- [user](user.md) - assign roles to users
- [usergroup](usergroup.md) - assign roles to user groups