Implementation ideas for RBAC

[pboers1988]

At SURF we see the need to have at least four priviledge levels in the application. We propose to have the following levels:

• Read-Only: Only able to view
• Access-Layer: Able to modify access ports
• Campus Admin: Able to modify all paramaters except for firmware
• Global Admin: Able to manage all parameters

Nice to Have:

• Make autoenrollment configurable depending on an oidc user claim that is made available to the application through an Identity provider.