docs: Document that grant strings allow multiple ids (#5975)

* docs: Document that grant strings allow multiple ids

* Update website/content/docs/configuration/identity-access-management/permission-grant-formats.mdx

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>

---------

Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com>
pull/5981/head
Dan Heath 9 months ago committed by GitHub
parent fdb665c86b
commit 91050dcd46
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

@ -18,9 +18,10 @@ A grant string has a form similar to:
There are two types of selectors:
- An `id` field that indicates a specific resource or a wildcard to match all
- An `ids` field that indicates a specific resource or a wildcard to match all.
You can enter multiple comma-separated ID values in a grant string.
- A `type` field that indicates a specific resource type or a wildcard to match
all; this might also be used to grant permissions on collections of resources
all; this might also be used to grant permissions on collections of resources.
Selectors are used to indicate the resources on which the grant should apply,
using specific IDs or wildcard IDs and type selectors.
@ -44,6 +45,12 @@ to specify `create` or `list` as actions in this format, because this format
explicitly identifies a resource.
The `create` and `list` actions are only supported for collections.
You can enter multiple comma-separated ID values in a grant string:
`ids=hsst_1234567890,hsst_0987654321;actions=read,update`
This example grants the `read` and `update` actions to both resources `hsst_1234567890` and `hsst_0987654321`.
## Type only
You can configure a grant to allow the specified actions for a given type.

Loading…
Cancel
Save