Custom Role with KVM, Shared Flow, Hook Permissions

[estebanlartigue]

I created a custom role for developer (read and write) in the GUI.

I found out later that I can't assign to the role the ability to

add/update KVM

add/update shared flows

(possibly add/update hooks)

I attempted the next script.

curl -X POST \ https://api.enterprise.apigee.com/v1/o/{{MY_ORG}}/userroles/{{MY_CUSTOM_ROLE}}/permissions \ -H 'Accept: application/json' \ -H 'Authorization: Basic {{M
Y_BASE_64_ORG_USER_AND_PASSWORD}}' \ -H 'Content-Type: application/json' \ -H 'Postman-Token: b4c5aab1-b293-4a4c-9780-46b98e919e03' \ -H 'cache-control: no-cache' \ -d '{ "path" : "/environments/dev/key-value-maps", "permissions" : ["put", "get"] }'

and it says 201 created.

but when logging in with a user with that role i still dont see add edit buttons. (I also tried the wildcard /key-value-maps/* )

[dchiesa1]

Are you sure the correct path is "/environments/dev/key-value-maps" ?

I thought it would be "/environments/dev/keyvaluemaps"

Can you try that?

[estebanlartigue]

you are absolutely right, /environments/stage/keyvaluemaps this works.

it seems I didnt have the right path for sharedflows since I got 201 but change didnt reflect on my user/role

for sharedflow i used

/environments/dev/sharedflows

do you have the right paths for sharedflows/hook ?

[dchiesa1]

I think for sharedflows (ability to create/read/update/delete sharedflows) the path is

/sharedflows

/applications

To grant the ability to deploy sharedflows to a particular environment, I believe the path is

/environments/dev/sharedflows/*/revisions/*/deployments

/environments/dev/applications/*/revisions/*/deployments

EDIT - Confusingly, I think the "applications" path element is used for both sharedflows and apiproxy bundles.

[estebanlartigue]

thank you !!! ill test it out tonight!