App Managers

The OLP CLI supports the following platform API commands:

  • list all users, apps, and groups that have manager access to an application
  • add manager access to a user, app, or group
  • remove manager access from a user, app, or group

app manager list

Retrieves all users, apps, and groups that have manager access to an application.

olp app manager list <app HRN> [command options]

Required parameters:

  • <app HRN> The HRN of the application.

Optional parameters:

  • --type <user|app|group> The type of a manager. If the parameter is omitted, all managers are displayed. Note that filtering is performed on the OLP CLI side, it means the entities are fetched from the server first with the --limit, and then a filter is applied.
  • --limit <max number of entities> Specifies the maximum number of entities returned in the result (100 by default).
  • --credentials <path to credentials file> The name of a credentials file to use with the command. Credentials files are downloaded separately from the HERE platform portal.
  • --profile <profile name> The name of the credentials profile to use from the olpcli.ini file.
  • --json Display the command's result in JSON format.
  • --quiet Display managers' HRNs, each on a new line.

For more information on using credentials and profiles, see Credentials Setup.

Example:

The command below lists all users, apps, and groups that manager access to the application:


olp app manager list hrn:here:account::myrealm:app/my-app-1234 --json

Output:


{"managers": [
    {
        "app": {
            "clientId": "my-app-1234",
            "name": "My Application",
            "description": "This is a description of My Application",
            "realm": "myrealm",
            "ownerId": "HERE-b9ba0d07-3031-4864-8c53-b27ce09022c1"
        },
        "permissions": [
            {
                "resource": "hrn:here:account::myrealm:app/my-app-1234",
                "effect": "allow",
                "action": "read",
                "id": "PERM-7heTYzsR05VR_p3IeyaZKDdlVPb1zJJUmzLI9JUEDcc",
                "serviceId": "SERVICE-eab2e46a-f3c1-4d76-82c6-96c0f428a4e1"
            },
            {
                "resource": "hrn:here:account::myrealm:app/my-app-1234",
                "effect": "allow",
                "action": "write",
                "id": "PERM-_UU4ofDaG-LdUdrvtRoYmCz3xzYTcGqHYoIKrndzroQ",
                "serviceId": "SERVICE-eab2e46a-f3c1-4d76-82c6-96c0f428a4e1"
            },
            {
                "resource": "hrn:here:account::myrealm:app/my-app-1234",
                "effect": "allow",
                "action": "manage",
                "id": "PERM-WnFtNZgCssuH6J8WdHM_-ftQ4NPc8huutDqDWHk0b2Y",
                "serviceId": "SERVICE-eab2e46a-f3c1-4d76-82c6-96c0f428a4e1"
            }
        ],
        "entityId": {
            "id": "my-app-1234",
            "type": "app"
        }
    }
]}

app manager add

Grants application manager access to a user, app, or group.

olp app manager add <app HRN> [command options]

Required parameters:

  • <app HRN> The HRN of the application.
  • Either of the following parameters:
    • --app <appID1 appID2 ...> The list of application IDs you want to grant app manager access to, separated by space.
    • --user <userID1 userID2 ...> The list of user IDs you want to grant app manager access to, separated by space. This information can be found in the .here/credentials.properties file, in the user's home directory, or via your profile.
    • --group <groupID1 groupID2 ...> The list of group IDs you want to grant app manager access to, separated by space.

Optional parameters:

  • --share Grants shared access to an application.
  • --credentials <path to credentials file> The name of a credentials file to use with the command. Credentials files are downloaded separately from the HERE platform ortal.
  • --profile <profile name> The name of the credentials profile to use from the olpcli.ini file.
  • --quiet Display an empty output skipping additional information.

For more information on using credentials and profiles, see Credentials Setup.

Example:

The command below grants app manager access to a user, app, and group:

Linux
Windows
olp app manager add hrn:here:account::myrealm:app/my-app-1234 \
   --app F9p0HU3qCqtxnZ3KnH4z \
   --user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 \
   --group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008
olp app manager add hrn:here:account::myrealm:app/my-app-1234 ^
   --app F9p0HU3qCqtxnZ3KnH4z ^
   --user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 ^
   --group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008

Output:


Granted manager access for the user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 to the application hrn:here:account::myrealm:app/my-app-1234
Granted manager access for the app F9p0HU3qCqtxnZ3KnH4z to the application hrn:here:account::myrealm:app/my-app-1234
Granted manager access for the group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008 to the application hrn:here:account::myrealm:app/my-app-1234

app manager remove

Revokes application manager access from a user, app, or group.

olp app manager remove <app HRN> [command options]

Required parameters:

  • <app HRN> The HRN of the application.
  • Either of the following parameters:
    • --app <appID1 appID2 ...> The list of application IDs you want to revoke app manager access from, separated by space.
    • --user <userID1 userID2 ...> The list of user IDs you want to revoke app manager access from, separated by space. This information can be found in the .here/credentials.properties file, in the user's home directory, or via your profile.
    • --group <groupID1 groupID2 ...> The list of group IDs you want to revoke app manager access from, separated by space.

Optional parameters:

  • --share Revokes only shared access for an application. Other permissions are left.
  • --credentials <path to credentials file> The name of a credentials file to use with the command. Credentials files are downloaded separately from the HERE platform portal.
  • --profile <profile name> The name of the credentials profile to use from the olpcli.ini file.
  • --quiet Display an empty output skipping additional information.

For more information on using credentials and profiles, see Credentials Setup.

Example:

The command below revokes app manager access from a user, app, and group:

Linux
Windows
olp app manager remove hrn:here:account::myrealm:app/my-app-1234 \
   --app F9p0HU3qCqtxnZ3KnH4z \
   --user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 \
   --group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008
olp app manager remove hrn:here:account::myrealm:app/my-app-1234 ^
   --app F9p0HU3qCqtxnZ3KnH4z ^
   --user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 ^
   --group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008

Output:


Revoked manager access for the user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 to the application hrn:here:account::myrealm:app/my-app-1234
Revoked manager access for the app F9p0HU3qCqtxnZ3KnH4z to the application hrn:here:account::myrealm:app/my-app-1234
Revoked manager access for the group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008 to the application hrn:here:account::myrealm:app/my-app-1234

results matching ""

    No results matching ""