Configuring Role Permissions

This section provides details on how to configure permissions by defining permissions to an API and the permissions associated with the APIs.

Defining permissions for APIs

If you wish to create additional permission, follow the steps given below:

1. Navigate to the JAX-RS web application that of your device types API folder. For more information, see the permission XML file of the virtual fire-alarm.

2. Define the new permission using the @permission annotation.
   The scope defines to whom the API is limited to and the permission that is associated with a given API.
   Example:

   @Permission(scope = "virtual_firealarm_user", permissions = {"/permission/admin/device-mgt/user/operations"})

3. Restart WSO2 IoT Server and you will see the new permission created in the permission tree.
   Now only users who have this specific permission assigned to them will be able to control the buzzer of the fire-alarm.

Permission APIs

Let's take a look at the default permissions associated with the APIs.