The roles in this area are meant to handle identity (users/groups/etc) management on a variety of identity management systems. Most systems have a common set of input parameters (first name, last name, e-mail address, etc.), below is a sample inventory for such a common inventory used with multiple target systems.
identities:
targets:
- idm
- atlassian
- rh-sso
users:
- user_name: gdownie
first_name: Gord
last_name: Downie
email: "[email protected]"
- user_name: lcohen
first_name: Leonard
last_name: Cohen
email: "[email protected]"
- user_name: rhawkins
first_name: Ron
last_name: Hawkins
email: "[email protected]"
targets:
- idm
- user_name: wclark
first_name: Wendel
last_name: Clark
email: "[email protected]"
realm: "my-realm"
targets:
- rh-sso
groups:
- name: "test-group1"
targets:
- idm
members:
- gdownie
- lcohen
- rhawkins
childgroups:
- ops
- devs
- name: "test-group2"
realm: "my-realm"
targets:
- rh-sso
members:
- rhawkins
- name: "test-group3"
targets:
- atlassian
members:
- gdownie
roles:
- name: "test-role"
realm: "test-realm"
targets:
- rh-sso
members:
- gdownie