## Attributes (3)

- name - The name of the user or group being mapped.

  Type | STRING
  Where is the attribute stored? | configuration
  Access Type | read-only
  Stability Level | default
  Raw DMR model |
      {
          "type" : {
              "TYPE_MODEL_VALUE" : "STRING"
          },
          "description" : "The name of the user or group being mapped.",
          "expressions-allowed" : false,
          "required" : true,
          "nillable" : false,
          "min-length" : 1,
          "max-length" : 2147483647,
          "stability" : "default",
          "access-type" : "read-only",
          "storage" : "configuration",
          "restart-required" : null,
          "capability-reference" : null
      }

- realm - An optional attribute to map based on the realm used for authentication.
  Deprecated Since 5.0.0
  This attribute is no longer used once management security is migrated to Elytron based security.

  Type | STRING
  Is the attribute nillable? | true
  Where is the attribute stored? | configuration
  Access Type | read-only
  Stability Level | default
  Raw DMR model |
      {
          "type" : {
              "TYPE_MODEL_VALUE" : "STRING"
          },
          "description" : "An optional attribute to map based on the realm used for authentication.",
          "expressions-allowed" : false,
          "required" : false,
          "nillable" : true,
          "min-length" : 1,
          "max-length" : 2147483647,
          "stability" : "default",
          "deprecated" : {
              "since" : "5.0.0",
              "reason" : "This attribute is no longer used once management security is migrated to Elytron based security."
          },
          "access-type" : "read-only",
          "storage" : "configuration",
          "restart-required" : null,
          "capability-reference" : null
      }

- type - The type of the Principal being mapped, either 'group' or 'user'.

  Type | STRING
  Where is the attribute stored? | configuration
  Access Type | read-only
  Allowed Values | GROUP USER
  Stability Level | default
  Raw DMR model |
      {
          "type" : {
              "TYPE_MODEL_VALUE" : "STRING"
          },
          "description" : "The type of the Principal being mapped, either 'group' or 'user'.",
          "expressions-allowed" : false,
          "required" : true,
          "nillable" : false,
          "allowed" : [
              "GROUP",
              "USER"
          ],
          "stability" : "default",
          "access-type" : "read-only",
          "storage" : "configuration",
          "restart-required" : null,
          "capability-reference" : null
      }

## Operations (2)

- add - Add a new principal to role mapping.

  Request Parameter | Type | Required | Expressions Allowed | Default value | Description
  --- | --- | --- | --- | --- | ---
  name | STRING | true | false |  | The name of the user or group being mapped.
  realm | STRING | false | false |  | An optional attribute to map based on the realm used for authentication.
  type | STRING | true | false |  | The type of the Principal being mapped, either 'group' or 'user'.

  Raw DMR model |
      {
          "operation-name" : "add",
          "description" : "Add a new principal to role mapping.",
          "request-properties" : {
              "name" : {
                  "type" : {
                      "TYPE_MODEL_VALUE" : "STRING"
                  },
                  "description" : "The name of the user or group being mapped.",
                  "expressions-allowed" : false,
                  "required" : true,
                  "nillable" : false,
                  "min-length" : 1,
                  "max-length" : 2147483647,
                  "stability" : "default"
              },
              "realm" : {
                  "type" : {
                      "TYPE_MODEL_VALUE" : "STRING"
                  },
                  "description" : "An optional attribute to map based on the realm used for authentication.",
                  "expressions-allowed" : false,
                  "required" : false,
                  "nillable" : true,
                  "min-length" : 1,
                  "max-length" : 2147483647,
                  "stability" : "default",
                  "deprecated" : {
                      "since" : "5.0.0",
                      "reason" : "This attribute is no longer used once management security is migrated to Elytron based security."
                  }
              },
              "type" : {
                  "type" : {
                      "TYPE_MODEL_VALUE" : "STRING"
                  },
                  "description" : "The type of the Principal being mapped, either 'group' or 'user'.",
                  "expressions-allowed" : false,
                  "required" : true,
                  "nillable" : false,
                  "allowed" : [
                      "GROUP",
                      "USER"
                  ],
                  "stability" : "default"
              }
          },
          "reply-properties" : {},
          "stability" : "default",
          "read-only" : false,
          "runtime-only" : false
      }

- remove - Remove an existing principal to role mapping.

  Raw DMR model |
      {
          "operation-name" : "remove",
          "description" : "Remove an existing principal to role mapping.",
          "request-properties" : {},
          "reply-properties" : {},
          "stability" : "default",
          "read-only" : false,
          "restart-required" : "resource-services",
          "runtime-only" : false
      }

## Galleon Features

Galleon features are to be used when creating Galleon feature-packs.

- core-service.management.access.authorization.role-mapping.exclude

      <feature spec="core-service.management.access.authorization.role-mapping.exclude">
        <param name="exclude" value="{resource name}"/>
        <param name="role-mapping" value="{resource name}"/>
        <param name="name" value="{value}"/>
        <param name="realm" value="{value}"/>
        <param name="type" value="{value}"/>
      <feature/>