ReBAC admin backend

The ReBAC Admin API is a REST API that provides various endpoints to query or manipulate relationships in JAAS ReBAC authorisation model.

OpenAPI specification

The OpenAPI spec can be found at https://<jimm-deployment>/rebac/v1/swagger.json

Authentication

These endpoints are meant to be called from a web browser, therefore the authentication is handled via Cookies.

JAAS Implementation

JAAS implements a subset of the operations described in the OpenAPI spec.

Status	Entities	Notes
✅	entitlements
✅	capabilities
✅	groups
✅	resources
✅	roles
🟡	identities	No support for creation, update and deletion.
❌	authentication	No support for identity provider management.