whether or not have vocabulary about roles like superuer, admin and others in the https://dexidp.io ?

[anlexN]

I have reviewed all docs in the https://dexidp.io.

but don't find any vocabulary about roles like superuser, admin, reader, writer and so on.

Where can I find these vocabulary? Which org establishes these standards?

[nabokihms]

Hello, @anlexN. I'm not sure I fully understand the question.

Dex is an identity provider, but there is no authorization in it. There are no roles. Could you please elaborate on what you are searching for a little bit more?

[anlexN]

I am looking for built-in (prebuilt) roles in https://dexidp.io. But I still can not find them in the https://dexidp.io

Can you tell me?

[nabokihms]

Unfortunately, there are no roles, because dex only authenticates users, not authorizes them.

[anlexN]

@nabokihms what framework/tools do you use to authorize users? Have you tried keycloak or Casdoor + Casbin?

[nabokihms]

They both authentication solutions.

Usually roles are on the side of the application. For example, you can connect Dex to Kubernetes: Dex will be in charge of authentication users and roles are Kubernetes RBAC entries, or you can connect Dex to Grafana, and roles will be provided by Grafana (dashboard editor, viewer and admin).

There are some authz frameworks like Zanzibar, but it depends on what you what to do with your authz. Do you want deep unified solution across lots of services, or just simply control access to two apps.

[anlexN]

Hello friends, Can you anwser these 5 questions?

1. For Identity and Access Management (IAM), Does openldap solve Identity or Access or the both?
2. How do you implement Identity and Access Management (IAM)?
3. Have you tried to implement Google Cloud's Identity and Access Management (IAM)?
4. Where is Google Cloud's Identity and Access Management (IAM) source code? I can not find it on github.com.
5. Do you use openldap to implement Identity and Access Management (IAM)?