RBAC Plugin - Conditional policies

[matdtr]

Hi,

I have a vanilla backstage instance and i'm integrating the RBAC plugin. Three questions:

• At the moment CONDITIONAL policies can be configured only via API?
• The conditional policies are supported in policy file?
• Are groups supported in 'superUsers' configuration?

I'm using:
"@janus-idp/backstage-plugin-rbac": "^1.14.4",

Looking forward your feedback.

BR

[PatAKnight]

Hello!

Yes, at the moment, conditional policies can only be configured through the API. We do have an issue for loading conditions from a file, but the work has not been started.

We only support users in the admin.superUsers configuration. However, the admin.users configuration does allow for groups and users. This configuration includes permissions for accessing the RBAC plugin API and for reading the catalog. You would just need additional permissions added either through the policy file or API in the case of requiring more access.