Instantiate the Simple RBAC template
To use Simple RBAC the first thing you need to do is install the Simple RBAC template. This will accomplish the following:
- Create a
simple-rbacpolicy instance which uses thepolicy-rebacpolicy image, and contains the Simple RBAC Quickstart. - Install the Citadel Demo IDP which is based on the Rick & Morty cartoon and contains 5 users.
- Install the Simple RBAC Data Connection which contains several objects along with relations to the Citadel users.
Instantiate the template
From the Console, click on the Policies tab. This will display the list of available Policy instances. Click on the Create an instance button in the upper right corner.
The "Create a policy instance" screen will be displayed with a list of options. Click on "...by instantiating a template".
Next you'll see the available templates that you can apply. Select Simple RBAC and click the Apply template button.
You'll now see a modal warning that all directory data will be removed. When you install a template, all existing directory data is removed. If you previously connected your own identity providers or manually added any data, it will be erased. The data from your identity providers will be re-imported, but any data created manually will be lost. To proceed, click the Delete Data button.
Once the template has finished installing, you will be taken back to the Policy instances screen where you can see the new simple-rbac instance has been created. Click on it.
Notice that the simple-rbac instance relies on the policy-rebac policy image: our RBAC scenario is a simple case of a relationship-based access control (ReBAC) model.
Next Steps
You should see the simple-rbac evaluator, which you will use in the next topic to test out your policy.
