Configuring Role Permissions

This section provides details on how to configure permissions by defining permissions to an API and the permissions associated with the APIs.

Defining permissions for APIs

If you wish to create additional permission, follow the steps give below:

1. Navigate to the JAXRS web application that of your device types API folder. For more information, see the permission XML file of the virtual fire-alarm.

2. Define the new permission using the @permission annotation.
   The scope defines to whom the API is limited to and the permission that is associated with a given API.
   Example:

   @Permission(scope = "virtual_firealarm_user", permissions = {"/permission/admin/device-mgt/user/operations"})

3. Restart WSO2 IoTS and you will see the new permission created in the permission tree.
   Afterwards only the users who have this specific permission assigned to them will be control the buzzer of the fire-alarm.

Permission APIs

Let's take a look at the default permissions associated with the APIs.