app manager

The OLP CLI supports the following platform API commands:

• list all users, apps, and groups that have manager access to an application
• add manager access to a user, app, or group
• remove manager access from a user, app, or group

app manager list

Retrieves all users, apps, and groups that have manager access to an application.

olp app manager list <app HRN> [command options]

Required parameters:

• <app HRN> The HRN of the application.

Optional parameters:

• --type <user|app|group> The type of manager. If the parameter is omitted, all managers are displayed. Note that filtering is performed on the OLP CLI side, it means the entities are fetched from the server first with the --limit, and then a filter is applied.
• --limit <max number of entities> Specifies the maximum number of entities returned in the result (100 by default).
• --credentials <path to credentials file> The name of a credentials file to use with the command. Credentials files are downloaded separately from the HERE platform portal.
• --profile <profile name> The name of the credentials profile to use from the olpcli.ini file.
• --json Displays the command result in JSON format.
• --quiet Displays managers' HRNs, each on a new line.

For more information on using credentials and profiles, see Credentials setup.

Example:

The command below lists all users, apps, and groups that have manager access to the application:

olp app manager list hrn:here-cn:account::org:app/my-app-1234 --json

Output:

{"managers": [
    {
        "app": {
            "clientId": "my-app-1234",
            "name": "My Application",
            "description": "This is a description of My Application",
            "realm": "org",
            "ownerId": "HERE-b9ba0d07-3031-4864-8c53-b27ce09022c1"
        },
        "permissions": [
            {
                "resource": "hrn:here-cn:account::org:app/my-app-1234",
                "effect": "allow",
                "action": "read",
                "id": "PERM-7heTYzsR05VR_p3IeyaZKDdlVPb1zJJUmzLI9JUEDcc",
                "serviceId": "SERVICE-eab2e46a-f3c1-4d76-82c6-96c0f428a4e1"
            },
            {
                "resource": "hrn:here-cn:account::org:app/my-app-1234",
                "effect": "allow",
                "action": "write",
                "id": "PERM-_UU4ofDaG-LdUdrvtRoYmCz3xzYTcGqHYoIKrndzroQ",
                "serviceId": "SERVICE-eab2e46a-f3c1-4d76-82c6-96c0f428a4e1"
            },
            {
                "resource": "hrn:here-cn:account::org:app/my-app-1234",
                "effect": "allow",
                "action": "manage",
                "id": "PERM-WnFtNZgCssuH6J8WdHM_-ftQ4NPc8huutDqDWHk0b2Y",
                "serviceId": "SERVICE-eab2e46a-f3c1-4d76-82c6-96c0f428a4e1"
            }
        ],
        "entityId": {
            "id": "my-app-1234",
            "type": "app"
        }
    }
]}

app manager add

Grants application manager access to a user, app, or group.

olp app manager add <app HRN> [command options]

Required parameters:

• <app HRN> The HRN of the application.
• Either of the following parameters:
  • --app <appID1 appID2 ...> The list of application IDs you want to grant app manager access to, separated by space.
  • --user <userID1 userID2 ...> The list of user IDs you want to grant app manager access to, separated by space. This information can be found in the .here/credentials.properties file, in the user's home directory, or via your profile.
  • --group <groupID1 groupID2 ...> The list of group IDs you want to grant app manager access to, separated by space.

Optional parameters:

• --share Grants shared access to an application.
• --credentials <path to credentials file> The name of a credentials file to use with the command. Credentials files are downloaded separately from the HERE platform portal.
• --profile <profile name> The name of the credentials profile to use from the olpcli.ini file.
• --quiet Displays empty output with no additional information.

For more information on using credentials and profiles, see Credentials setup.

Example:

The command below grants app manager access to a user, app, and group:

olp app manager add hrn:here-cn:account::org:app/my-app-1234 \
   --app F9p0HU3qCqtxnZ3KnH4z \
   --user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 \
   --group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008

olp app manager add hrn:here-cn:account::org:app/my-app-1234 ^
   --app F9p0HU3qCqtxnZ3KnH4z ^
   --user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 ^
   --group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008

Output:

Granted manager access for the user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 to the application hrn:here-cn:account::org:app/my-app-1234
Granted manager access for the app F9p0HU3qCqtxnZ3KnH4z to the application hrn:here-cn:account::org:app/my-app-1234
Granted manager access for the group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008 to the application hrn:here-cn:account::org:app/my-app-1234

app manager remove

Revokes application manager access from a user, app, or group.

olp app manager remove <app HRN> [command options]

Required parameters:

• <app HRN> The HRN of the application.
• Either of the following parameters:
  • --app <appID1 appID2 ...> The list of application IDs you want to revoke app manager access from, separated by space.
  • --user <userID1 userID2 ...> The list of user IDs you want to revoke app manager access from, separated by space. This information can be found in the .here/credentials.properties file, in the user's home directory, or via your profile.
  • --group <groupID1 groupID2 ...> The list of group IDs you want to revoke app manager access from, separated by space.

Optional parameters:

• --share Revokes only shared access for an application. Other permissions are left.
• --credentials <path to credentials file> The name of a credentials file to use with the command. Credentials files are downloaded separately from the HERE platform portal.
• --profile <profile name> The name of the credentials profile to use from the olpcli.ini file.
• --quiet Displays empty output with no additional information.

For more information on using credentials and profiles, see Credentials setup.

Example:

The command below revokes app manager access from a user, app, and group:

olp app manager remove hrn:here-cn:account::org:app/my-app-1234 \
   --app F9p0HU3qCqtxnZ3KnH4z \
   --user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 \
   --group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008

olp app manager remove hrn:here-cn:account::org:app/my-app-1234 ^
   --app F9p0HU3qCqtxnZ3KnH4z ^
   --user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 ^
   --group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008

Output:

Revoked manager access for the user HERE-05966c89-aaf1-4ae2-b0e4-3676b3f8b8c3 to the application hrn:here-cn:account::org:app/my-app-1234
Revoked manager access for the app F9p0HU3qCqtxnZ3KnH4z to the application hrn:here-cn:account::org:app/my-app-1234
Revoked manager access for the group GROUP-859ddd60-78f2-4ad2-865d-7351b01ff008 to the application hrn:here-cn:account::org:app/my-app-1234