1
我有一個連接到UAA的波什目錄。我想要做的就是限制只能訪問其發佈版的團隊訪問Director。因此我想在UAA中使用團隊。與UAA和BOSH的團隊權限
現在我有UAA和BOSH以下問題，本文檔https://bosh.io/docs/director-users-uaa-perms.html#team-admin如下：
自己創建的羣組
bosh.teams.jenkins.admin與uaac group add bosh.teams.jenkins.admin我創建了一個用戶
jenkinsadmin與uaac user add jenkinsadmin --emails [email protected]我將用戶添加到組中
uaac member add bosh.teams.jenkins.admin jenkinsadmin
另外我補充
scope: openid,bosh.admin,bosh.read,bosh.*.admin,bosh.*.read,bosh.teams.*.admin
到BOSH導演的清單。
當我現在嘗試上載波什釋放與bosh upload release我收到以下錯誤信息：
Error 600000: Require one of the scopes: bosh.admin, bosh.0c5b93a8-46a5-4cb2-81be-b17f97afaf0f.admin
我查了我的用戶的設置與uaac user get jenkinsadmin，看到下面的輸出：
groups:
-
value: d6788c74-9d24-4df0-9215-1413ad8c7fed
display: cloud_controller_service_permissions.read
type: DIRECT
-
value: 0298444a-d9e3-456a-a27b-4fc66d5e41df
display: openid
type: DIRECT
-
value: 763ae5cc-7d9e-411f-9e08-54850ff9fe44
display: password.write
type: DIRECT
-
value: a349c0b8-f543-4409-8441-c8a6acdea488
display: notification_preferences.read
type: DIRECT
-
value: 7bde9588-8d6e-4c51-81f8-c5a4cf71fdd7
display: cloud_controller.read
type: DIRECT
-
value: ad49d3a5-232f-45fa-917d-f74326674857
display: uaa.user
type: DIRECT
-
value: 013ed852-59ad-4c88-9c3d-5e397f82f18b
display: scim.me
type: DIRECT
-
value: 83e5c21e-74c2-412e-a1e9-9a206841b0dc
display: bosh.teams.jenkins.admin
type: DIRECT
-
value: 09a37162-a999-416b-b1fd-923378aba7d8
display: notification_preferences.write
type: DIRECT
-
value: 2cd48b42-a0dc-4f60-9ac6-67cf40023726
display: approvals.me
type: DIRECT
-
value: ad596184-4de8-4b43-8779-1292af4ebe04
display: oauth.approvals
type: DIRECT
-
value: 3c0df91d-4f70-4320-aa34-01a9651272ee
display: cloud_controller.write
type: DIRECT
approvals:
active: true
verified: false
origin: uaa
schemas: urn:scim:schemas:core:1.0
username: jenkinsadmin
zoneid: uaa
所以我的問題是，我需要做些什麼來啓用UAA用戶jenkinsadmin上傳發布？