Introdução

Busca

Catálogo

Subpav OSA SMS

eAi Agent

Registro Municipal Integrado

GO

Encurtador de URLs

Surkai

Heimdall API

Get Cerbos superadmin policy template

curl --request GET \
  --url https://services.pref.rio/heimdall-admin/api/v1/cerbos-policy-template

{
  "apiVersion": "api.cerbos.dev/v1",
  "kind": "RolePolicy",
  "metadata": {
    "storeIdentifier": "role_superadmin"
  },
  "rolePolicy": {
    "role": "superadmin",
    "version": "default",
    "rules": [
      {
        "resource": "*",
        "actions": [
          {
            "action": "*",
            "effect": "EFFECT_ALLOW"
          }
        ]
      }
    ]
  }
}

health

Get Cerbos superadmin policy template

Get the Cerbos policy template for granting superadmin permissions.

This endpoint provides the policy configuration that should be applied to Cerbos when the admin API is disabled and manual policy configuration is required.

Use Case: When Heimdall cannot automatically create the superadmin policy (e.g., Cerbos admin API is disabled), use this template to manually configure the policy in your Cerbos deployment.

Instructions:

Get the policy template from this endpoint
Save it as a YAML or JSON file in your Cerbos configuration
Apply it via your Cerbos deployment method (ConfigMap, file system, etc.)

GET

api

cerbos-policy-template

Get Cerbos superadmin policy template

curl --request GET \
  --url https://services.pref.rio/heimdall-admin/api/v1/cerbos-policy-template

{
  "apiVersion": "api.cerbos.dev/v1",
  "kind": "RolePolicy",
  "metadata": {
    "storeIdentifier": "role_superadmin"
  },
  "rolePolicy": {
    "role": "superadmin",
    "version": "default",
    "rules": [
      {
        "resource": "*",
        "actions": [
          {
            "action": "*",
            "effect": "EFFECT_ALLOW"
          }
        ]
      }
    ]
  }
}

Response

200 - application/json

Cerbos policy template retrieved successfully

Readiness check List all users