We don't have a REST API that takes a user and gives back roles.  We try to
focus on permissions instead of roles, since the meaning of a role can
change between clusters.

On Wed, Jun 15, 2016 at 3:19 PM, Marc Boorshtein <[email protected]>
wrote:

> Thanks David,  I'm trying to figure out though for a specific user (I'm
> actually trying to do this with the RESTful API but I figured I'd work
> backwards from the oc command).  If I have a specific user, how to I list
> all the roles that user is a member of?  For instance if I hit
>
> /oapi/v1/users/username I get some attributes about username and a list of
> groups, but no roles.  The rolebinding endpoints all look to only list
> members of the binding but not the other way.  is what I'm looking for
> exist?
>
> Thanks
>
> On Wed, Jun 15, 2016 at 1:56 PM, David Eads <[email protected]> wrote:
>
>> As a project admin, `oc get rolebindings` will show you all the
>> rolebindings in a given namespace.
>>
>> As a cluster-admin, `oc get clusterrolebindings` will show you all the
>> clusterrolebindings which have power across all namespaces.
>>
>> On Wed, Jun 15, 2016 at 1:47 PM, Marc Boorshtein <[email protected]>
>> wrote:
>>
>>> I have origin setup, and I know I can add/remove a role from a user
>>> using the oc policy commands, but how do I actually list what (if any)
>>> roles a user already has?
>>>
>>> Thanks
>>> Marc
>>>
>>> _______________________________________________
>>> users mailing list
>>> [email protected]
>>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>>
>>>
>>
>
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Reply via email to