<a id="jaas-rebac-admin-backend"></a>

# ReBAC admin backend

The ReBAC Admin API is a REST API that provides various endpoints to query or
manipulate relationships in JAAS ReBAC authorisation model.

## OpenAPI specification

The OpenAPI spec can be found at `https://<jimm-deployment>/rebac/v1/swagger.json`

## Authentication

These endpoints are meant to be called from a web browser, therefore the authentication is handled via Cookies.

## JAAS Implementation

JAAS implements a subset of the operations described in the OpenAPI spec.

| Status   | Entities         | Notes                                         |
|----------|------------------|-----------------------------------------------|
| ✅        | `entitlements`   |                                               |
| ✅        | `capabilities`   |                                               |
| ✅        | `groups`         |                                               |
| ✅        | `resources`      |                                               |
| ✅        | `roles`          |                                               |
| 🟡        | `identities`     | No support for creation, update and deletion. |
| ❌        | `authentication` | No support for identity provider management.  |