...
WSO2 products has two types of roles. External Roles and Internal Roles. Let say there are two user stores.
| Store-A | Store-B | |
|---|---|---|
| Users | user_A | user_B |
| Roles | role_A | role_B |
External Roles :
Store in user store itself. Only users in that user store can assign to external roles in same user store.
Eg : user_A can assign to role_A
user_B can't assign to role_A
Store in user store itself. Only users in that user store can assign to external roles in same user store.
Eg : user_A can assign to role_A
user_B can't assign to role_A
In the user stores Users are assign to a
GroupGroups. Within the WSO2 servers we have Roles and directly map one Group to a Role then assign the permission for that role. There is a one to one mapping between Groups and Roles and same Group name is used to represent the Role in the server.
...
For internal Roles there are not no mapped Groups in user stores. So we directly assign users to these roles (Do not support to assign Groups to these Roles)
...