Access Control Action Set: Syntax

Provides actions for managing user access to resources

operAdminMd Action

Assigns users and groups to roles and modifies administrator metadata.

Example:

Designate a Superuser

CASL Syntax

Expand all Collapse all

accessControl.operAdminMd <result=results> <status=rc> /

admin="string",

adminRole="ACTION" | "DATA" | "SUPERUSER" | "UNSPECIFIED",

description="string",

identity="string",

identityType="GROUP" | "GUEST" | "UNSPECIFIED" | "USER",

newName="string",

task="ADD" | "DELETE" | "UPDATE"

;

indicates a required parameter

Parameter Descriptions

* admin="string"

names the administrator.

* adminRole="ACTION" | "DATA" | "SUPERUSER" | "UNSPECIFIED"

specifies the type of administrator.

Default	SUPERUSER

description="string"

specifies the purpose of the access control.

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "UNSPECIFIED" | "USER"

specifies the type of identity that is associated with the access control.

Default	UNSPECIFIED

newName="string"

specifies the new name of an existing object in metadata.

* task="ADD" | "DELETE" | "UPDATE"

specifies the operation to perform.

Default	ADD

operAdminMd Action

Assigns users and groups to roles and modifies administrator metadata.

Example:

Designate a Superuser

Lua Syntax

Expand all Collapse all

results, info = s:accessControl_operAdminMd{

admin="string",

adminRole="ACTION" | "DATA" | "SUPERUSER" | "UNSPECIFIED",

description="string",

identity="string",

identityType="GROUP" | "GUEST" | "UNSPECIFIED" | "USER",

newName="string",

task="ADD" | "DELETE" | "UPDATE"

}

indicates a required parameter

Parameter Descriptions

* admin="string"

names the administrator.

* adminRole="ACTION" | "DATA" | "SUPERUSER" | "UNSPECIFIED"

specifies the type of administrator.

Default	SUPERUSER

description="string"

specifies the purpose of the access control.

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "UNSPECIFIED" | "USER"

specifies the type of identity that is associated with the access control.

Default	UNSPECIFIED

newName="string"

specifies the new name of an existing object in metadata.

* task="ADD" | "DELETE" | "UPDATE"

specifies the operation to perform.

Default	ADD

operAdminMd Action

Assigns users and groups to roles and modifies administrator metadata.

Example:

Designate a Superuser

Python Syntax

Expand all Collapse all

results=s.accessControl.operAdminMd(

admin="string",

adminRole="ACTION" | "DATA" | "SUPERUSER" | "UNSPECIFIED",

description="string",

identity="string",

identityType="GROUP" | "GUEST" | "UNSPECIFIED" | "USER",

newName="string",

task="ADD" | "DELETE" | "UPDATE"

)

indicates a required parameter

Parameter Descriptions

* admin="string"

names the administrator.

* adminRole="ACTION" | "DATA" | "SUPERUSER" | "UNSPECIFIED"

specifies the type of administrator.

Default	SUPERUSER

description="string"

specifies the purpose of the access control.

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "UNSPECIFIED" | "USER"

specifies the type of identity that is associated with the access control.

Default	UNSPECIFIED

newName="string"

specifies the new name of an existing object in metadata.

* task="ADD" | "DELETE" | "UPDATE"

specifies the operation to perform.

Default	ADD

operAdminMd Action

Assigns users and groups to roles and modifies administrator metadata.

Example:

Designate a Superuser

R Syntax

Expand all Collapse all

results <– cas.accessControl.operAdminMd(s,

admin="string",

adminRole="ACTION" | "DATA" | "SUPERUSER" | "UNSPECIFIED",

description="string",

identity="string",

identityType="GROUP" | "GUEST" | "UNSPECIFIED" | "USER",

newName="string",

task="ADD" | "DELETE" | "UPDATE"

)

indicates a required parameter

Parameter Descriptions

* admin="string"

names the administrator.

* adminRole="ACTION" | "DATA" | "SUPERUSER" | "UNSPECIFIED"

specifies the type of administrator.

Default	SUPERUSER

description="string"

specifies the purpose of the access control.

identity="string"

specifies the user or group.

* identityType="GROUP" | "GUEST" | "UNSPECIFIED" | "USER"

specifies the type of identity that is associated with the access control.

Default	UNSPECIFIED

newName="string"

specifies the new name of an existing object in metadata.

* task="ADD" | "DELETE" | "UPDATE"

specifies the operation to perform.

Default	ADD

Last updated: July 15, 2026