Authentication & Authorization

The following section describes the API Portal authorization process.

Introduction¶

API Portal access policies are bind to the APIAccess CRD.

Once you created a user and assigned the user to a user group, you have to appoint the user group to an API in the APIAccess CRD.

Example¶

See the following showcase. The user Jane Flour is part of the user group with the name support.

In the Portal permissions, you can see that this group has access to two APIs

User¶

API Portal Permissions¶

APIAccess¶

api-access.yaml

---
apiVersion: hub.traefik.io/v1alpha1
kind: APIAccess
metadata:
  name: custom-pick
spec:
  groups:
    - support
  apiSelector:
    matchExpressions:
      - key: area
        operator: In
        values:
          - flights
          - tickets

API Portal¶

What's next¶

Follow our detailed tutorial about how to configure API Portal access