config-local.yaml

graphql:
  query:
    apisForApplication: ["application:read"]
    eventsForApplication: ["application:read"]
    applications: ["application:read"]
    application: ["application:read"]
    applicationBySystemNumber: ["application:read"]
    applicationsByLocalTenantID: ["application:read"]
    applicationByLocalTenantIDAndAppTemplateID: ["application:read"]
    applicationsForRuntime: ["application:read"]
    applicationTemplates: ["application_template:read"]
    applicationTemplate: ["application_template:read"]
    runtimes: ["runtime:read"]
    runtimeContexts: ["runtime:read"]
    runtime: ["runtime:read"]
    runtimeContext: ["runtime:read"]
    labelDefinitions: ["label_definition:read"]
    labelDefinition: ["label_definition:read"]
    bundleByInstanceAuth: ["application:read"]
    bundleInstanceAuth: ["application:read"]
    healthChecks: ["health_checks:read"]
    integrationSystem: ["integration_system:read"]
    integrationSystems: ["integration_system:read"]
    viewer: []
    tenants: ["tenant:read"]
    rootTenant: ["tenant:read"]
    automaticScenarioAssignments: ["automatic_scenario_assignment:read"]
    automaticScenarioAssignmentForScenario: ["automatic_scenario_assignment:read"]
    automaticScenarioAssignmentsForSelector: ["automatic_scenario_assignment:read"]
    systemAuth: ["runtime.auths:read", "application.auths:read", "integration_system.auths:read"]
    formationTemplate: [ "formation_template:read" ]
    formationTemplates: [ "formation_template:read" ]
    formationTemplatesByName: [ "formation_template:read" ]
    formation: ["formation:read"]
    formationByName: ["formation:read"]
    formations: ["formation:read"]
    formationsForObject: ["formation:global_read"]
    formationConstraint: ["formation_constraint:read"]
    formationConstraints: ["formation_constraint:read"]
    formationConstraintsByFormationType: ["formation_constraint:read"]
    certificateSubjectMapping: ["certificate_subject_mapping:read"]
    certificateSubjectMappings: ["certificate_subject_mapping:read"]

  mutation:
    registerApplication: ["application:write"]
    registerApplicationFromTemplate: ["application:write"]
    updateApplication: ["application:write"]
    unregisterApplication: ["application:write"]
    mergeApplications: ["application:write"]
    createApplicationTemplate: ["application_template:write"]
    updateApplicationTemplate: ["application_template:write"]
    deleteApplicationTemplate: ["application_template:write"]
    registerRuntime: ["runtime:write"]
    updateRuntime: ["runtime:write"]
    unregisterRuntime: ["runtime:write"]
    registerRuntimeContext: [ "runtime:write" ]
    updateRuntimeContext: [ "runtime:write" ]
    unregisterRuntimeContext: [ "runtime:write" ]
    registerIntegrationSystem: ["integration_system:write"]
    updateIntegrationSystem: ["integration_system:write"]
    unregisterIntegrationSystem: ["integration_system:write"]
    addWebhook: ["webhook:write"]
    updateWebhook: ["webhook:write"]
    deleteWebhook: ["webhook:write"]
    addAPIDefinitionToBundle: ["application:write"]
    addAPIDefinitionToApplication: ["application:write"]
    updateAPIDefinition: ["application:write"]
    updateAPIDefinitionForApplication: ["application:write"]
    deleteAPIDefinition: ["application:write"]
    refetchAPISpec: ["application:write"]
    addEventDefinitionToBundle: ["application:write"]
    addEventDefinitionToApplication: ["application:write"]
    updateEventDefinition: ["application:write"]
    updateEventDefinitionForApplication: [ "application:write" ]
    deleteEventDefinition: ["application:write"]
    refetchEventAPISpec: ["application:write"]
    addIntegrationDependencyToApplication: ["application:write"]
    deleteIntegrationDependency: ["application:write"]
    addDocumentToBundle: ["application:write"]
    deleteDocument: ["application:write"]
    createFormation: ["formation:write"]
    deleteFormation: ["formation:write"]
    assignFormation: ["formation:write"]
    unassignFormation: ["formation:write"]
    unassignFormationGlobal: ["formation:global_write"]
    resynchronizeFormationNotifications: ["formation:write"]
    finalizeDraftFormation: [ "formation:write" ]
    createLabelDefinition: ["label_definition:write"]
    updateLabelDefinition: ["label_definition:write"]
    setApplicationLabel: ["application:write"]
    deleteApplicationLabel: ["application:write"]
    setRuntimeLabel: ["runtime:write"]
    deleteRuntimeLabel: ["runtime:write"]
    requestOneTimeTokenForRuntime: ["runtime:write"]
    requestOneTimeTokenForApplication: ["application:write"]
    requestClientCredentialsForRuntime: ["runtime:write"]
    requestClientCredentialsForApplication: ["application:write"]
    requestClientCredentialsForIntegrationSystem: ["integration_system:write"]
    deleteSystemAuthForRuntime: ["runtime:write"]
    deleteSystemAuthForApplication: ["application:write"]
    deleteSystemAuthForIntegrationSystem: ["integration_system:write"]
    setDefaultEventingForApplication: ["eventing:manage"]
    deleteDefaultEventingForApplication: ["eventing:manage"]
    requestBundleInstanceAuthCreation: ["runtime:write"]
    requestBundleInstanceAuthDeletion: ["runtime:write"]
    setBundleInstanceAuth: ["application:write"]
    deleteBundleInstanceAuth: ["application:write"]
    createBundleInstanceAuth: ["bundle_instance_auth:write"]
    updateBundleInstanceAuth: ["bundle_instance_auth:write"]
    addBundle: ["application:write"]
    updateBundle: ["application:write"]
    deleteBundle: ["application:write"]
    writeTenants: ["tenant:write"]
    deleteTenants: ["tenant:write"]
    updateTenant: ["tenant:write"]
    setTenantLabel: ["tenant:write"]
    subscribeTenant: ["tenant_subscription:write"]
    unsubscribeTenant: ["tenant_subscription:write"]
    createFormationTemplate: ["formation_template:write"]
    deleteFormationTemplate: ["formation_template:write"]
    updateFormationTemplate: ["formation_template:write"]
    createFormationConstraint: ["formation_constraint:write"]
    updateFormationConstraint: ["formation_constraint:write"]
    deleteFormationConstraint: ["formation_constraint:write"]
    attachConstraintToFormationTemplate: [ "formation_constraint:write" ]
    detachConstraintFromFormationTemplate: [ "formation_constraint:write" ]
    createCertificateSubjectMapping: [ "certificate_subject_mapping:write" ]
    updateCertificateSubjectMapping: [ "certificate_subject_mapping:write" ]
    deleteCertificateSubjectMapping: [ "certificate_subject_mapping:write" ]
    addTenantAccess: [ "tenant_access:write" ]
    removeTenantAccess: [ "tenant_access:write" ]

  field:
    fetch_request:
      auth: [ "fetch-request.auth:read" ]
    webhooks:
        auth: [ "webhooks.auth:read" ]
    application:
      auths: ["application.auths:read"]
      webhooks: ["application.webhooks:read"]
      application_template: [ "application.application_template:read"]
    application_template:
      webhooks: ["application_template.webhooks:read"]
    bundle:
      instance_auth: ["bundle.instance_auths:read"]
      instance_auths: ["bundle.instance_auths:read"]
      default_instance_auth: ["bundle.instance_auths:read"]
    document:
      fetch_request: ["document.fetch_request:read"]
    event_spec:
      fetch_request: ["event_spec.fetch_request:read"]
    api_spec:
      fetch_request: ["api_spec.fetch_request:read"]
    runtime:
      auths: ["runtime.auths:read"]
      webhooks: ["runtime.webhooks:read"]
    formation_template:
      webhooks: ["formation_template.webhooks:read"]
    integration_system:
      auths: ["integration_system.auths:read"]
    formation:
      tenant_id: ["formation:global_read"]

  input:
    application:
      localTenantID: [ "application.local_tenant_id:write" ]
    application_template:
      labels: [ "application_template.labels:write" ]
    formation:
      state: [ "formation.state:write" ]

# Scopes assigned for every new Client Credentials by given object type (Runtime / Application / Integration System)
clientCredentialsRegistrationScopes:
  runtime:
    - "runtime:read"
    - "runtime:write"
    - "application:read"
    - "runtime.auths:read"
    - "bundle.instance_auths:read"
    - "runtime.webhooks:read"
    - "webhook:write"
  application:
    - "application:read"
    - "application:write"
    - "application.auths:read"
    - "application.webhooks:read"
    - "application.application_template:read"
    - "bundle.instance_auths:read"
    - "webhook:write"
  integration_system:
    - "application:read"
    - "application:write"
    - "application.local_tenant_id:write"
    - "application_template:read"
    - "application_template:write"
    - "runtime:read"
    - "runtime:write"
    - "integration_system:read"
    - "label_definition:read"
    - "label_definition:write"
    - "automatic_scenario_assignment:read"
    - "integration_system.auths:read"
    - "application.webhooks:read"
    - "application_template.webhooks:read"
    - "formation:read"
    - "formation:write"
    - "internal_visibility:read"
    - "application.auths:read"
    - "webhook:write"
    - "formation_template:read"
    - "formation_template.webhooks:read"
  super_admin:
    - "application:read"
    - "application:write"
    - "application_global:read"
    - "application_template:read"
    - "application_template:write"
    - "integration_system:read"
    - "integration_system:write"
    - "runtime:read"
    - "runtime:write"
    - "label_definition:read"
    - "label_definition:write"
    - "eventing:manage"
    - "tenant:read"
    - "automatic_scenario_assignment:read"
    - "application.auths:read"
    - "application.webhooks:read"
    - "application.application_template:read"
    - "application_template.webhooks:read"
    - "application_template.labels:write"
    - "bundle.instance_auths:read"
    - "document.fetch_request:read"
    - "event_spec.fetch_request:read"
    - "api_spec.fetch_request:read"
    - "integration_system.auths:read"
    - "runtime.auths:read"
    - "fetch-request.auth:read"
    - "webhooks.auth:read"
    - "formation:read"
    - "formation:write"
    - "internal_visibility:read"
    - "runtime.webhooks:read"
    - "webhook:write"
    - "formation_template:read"
    - "formation_template:write"
    - "formation_template.webhooks:read"
    - "formation_constraint:read"
    - "formation_constraint:write"
    - "certificate_subject_mapping:read"
    - "certificate_subject_mapping:write"
    - "formation.state:write"
    - "formation:global_write"
    - "formation:global_read"
applicationHideSelectors:
  applicationHideSelectorKey:
    - "applicationHideSelectorValue"