Federated vs Local Roles

CNM Cyber

Federated vs System Roles (hereinafter, the Lectio) is the lesson part of the Middleware Essentials lesson that introduces its participants to CNM Cabin. This lesson belongs to the CNM Cyber for Experience session of the CNM Cyber Orientation.

Content

The predecessor lectio is System-User Roles.

Script

It is worth mentioning that CNM Cabin manages its own system-user roles and every other service of CNM Cyber uses that role to allow that user to access its resources. CNM Cabin's system-user roles are called federated. Going further, every service is supported by their own systems and those systems can manage their own system-user roles. For instance, if CNM Cabin identifies you and informs CNM Social that your federated role is CertUser, CNM Social checks its own database and clarify that you joined some communities and, possibly, manage another. If no internal permissions are assigned, then the particular service takes your federated role by default.

Nevertheless, throughout all services of CNM Cyber, only CNM Cabin can identify you as you. No other service or system can do that; they rely on CNM Cabin's determination.

Key terms

Identity and access management (IAM), federated role

Closing

Which statement below is correct:

1. CNM apps use the internal system roles when these roles contradict the federated roles assigned by CNM Cabin.
2. CNM apps use the federated roles assigned by CNM Cabin when these roles contradict the internal system roles.
3. When the internal system roles and federated roles assigned by CNM Cabin contradict each other, a CNM app uses the one that is assigned earlier.
4. All of the other substantive answers are correct.
5. None of the other answers is correct.

CNM Apps is the successor lectio.