blob: ab7196b5819ddc703a947b2665c88fdb119b5e6d [file]
{
"name":"PolicySet-for-APM",
"policies":[
{
"target":{
"action":"PATCH",
"resource":{
"uriTemplate":"/services/apm/alarmmanagement/alarms/{uuid}"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/asset/tz/timeZone/{assetId}"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/config/{version}/tenants/{tenantId}/components/{componentName}"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/{version}/faulttolerance/create"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profiles"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profiles"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profiles"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profiles"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PATCH",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profiles"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileSources"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileSources"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileSources"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileSources"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PATCH",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileSources"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileTypes"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileTypes"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileTypes"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileTypes"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PATCH",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/profileTypes"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/tags"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/tags"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/tags"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/tags"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PATCH",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/tags"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/templates"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/templates"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/templates"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/templates"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PATCH",
"resource":{
"uriTemplate":"/services/apm/profileService/{version}/templates"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/ss/v0/analytics"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/ss/v0/analytics/{assetUUID}"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/ss/v0/blueprints"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/timeseries/data"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/timeseries/smartsignaldata"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/{version}/umgmt/users/me"
}
},
"conditions":[
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/{version}/acs/{anySubPath}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/{version}/acs/{anySubPath}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/{version}/acs/{anySubPath}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/{version}/acs/{anySubPath}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/adapter/pgs/asset/incremental/upload"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/adapter/pgs/asset/upload"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/adapter/pgs/assetType/upload"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/adapter/pgs/om/alarm/create"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/adapter/pgs/ss/alarm/create"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/adapter/task/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/adapter/tasks"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/alarmmanagement/alarms"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/alarmreports/{version}/timeseries/digest"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/alarmreports/{version}/timeseries/init"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/{version}/alarmprofiles/profile/profileByName"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/{version}/alarmtemplates/getTemplatesForAlarm"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/assetType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/assetType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/assetType/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterprise"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterprise/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterprise/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterprise/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterpriseType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterpriseType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterpriseType/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segment"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segment/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segment/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segmentType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segmentType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segmentType/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/site"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/assetregistry/site/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/assetregistry/site/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/siteType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/siteType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/siteType/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/algorithm"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/assetregistry/algorithm/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}/algorithm/associate"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}/tag/associate"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}/tag/disassociate"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segment/{uuid}/tag/associate"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segment/{uuid}/tag/disassociate"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/site/{uuid}/tag/associate"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/site/{uuid}/tag/disassociate"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/assetregistry/tag"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/assetregistry/tag"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/assetregistry/tag/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/blobstorage/attachments"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'Ingestor' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/alarmmanagement/alarms"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/alarmmanagement/alarms/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/alarmmanagement/v2/alarms"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/alarmmanagement/v2/alarms"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/alarmreports/{version}/reports"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"services/apm/{version}/alarmtemplates/views/getViews"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/{version}/alarmtemplates/getTemplateName"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/{version}/alarmtemplates/templates"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/{version}/alarmtemplates/views/getViews"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetbrowser/asset"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/bySourceKey"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}/children"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}/parent"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/assetType/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterprise/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterprise/{uuid}/sites"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterprises"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterpriseType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/enterpriseType/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segment/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segment/{uuid}/children"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segment/{uuid}/parent"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segmentType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/segmentType/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/site/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/site/{uuid}/segments"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/siteType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/siteType/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}/measurementtags"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/asset/{uuid}/tags"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/timeseries/{uuid}/{startTime}/{endTime}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/blobstorage/attachments"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/blobstorage/attachments"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/blobstorage/attachments/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/blobstorage/attachments/{uuid}/download"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/casemanagement/cases"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PUT",
"resource":{
"uriTemplate":"/services/apm/casemanagement/cases"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/casemanagement/cases/{caseuuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"POST",
"resource":{
"uriTemplate":"/services/apm/notemanagement/notes"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/notemanagement/notes"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"DELETE",
"resource":{
"uriTemplate":"/services/apm/notemanagement/notes/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/gasturbineperformance/assetpair"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/gasturbineperformance/{page}/currentperformance"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/gasturbineperformance/{page}/timeseries/{startTimeMillis}/{endTimeMillis}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/heatexchanger/assetpair"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/heatexchanger/{phase}/currentperformance"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/heatexchanger/{phase}/timeseries/{startTimeMillis}/{endTimeMillis}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/processcompressor/assetpair"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/processcompressor/{page}/currentperformance"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/processcompressor/{page}/timeseries/{startTimeMillis}/{endTimeMillis}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/processsurveillance/kpi"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/processsurveillance/tier2/pages"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/pgsanalytics/propanephase/historical/{phase}/{startTimeMillis}/{endTimeMillis}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/{version}/umgmt/users"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/{version}/umgmt/users/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"PATCH",
"resource":{
"uriTemplate":"/services/{version}/umgmt/users/{uuid}"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"action":"GET",
"resource":{
"uriTemplate":"/services/apm/assetregistry/assetType"
}
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'M&D Manager,' }"
}
],
"effect":"PERMIT"
},
{
"target":{
"resource":{
"uriTemplate":"/services/{anySubPath:.+}"
},
"action":"GET"
},
"conditions":[
{
"condition":"subject.attributes('https://acs.apm.ge.com', 'role')*.split(':').any { sa -> sa.size() > 0 & sa[0] == 'ReadOnly' }"
}
],
"effect":"PERMIT"
},
{
"name":"Deny all operations by default",
"effect":"DENY"
}
]
}