+1 role: configure_access_control_attributes

aac/configure_access_control_attributes/defaults/main.yml

@@ -0,0 +1 @@
+# Default variables for configuration of access control attributes

aac/configure_access_control_attributes/meta/main.yml

@@ -0,0 +1,17 @@
+galaxy_info:
+  author: IBM
+  description: Role to confiure access control attributes
+  company: IBM
+
+  license: Apache
+
+  min_ansible_version: 2.2
+
+  galaxy_tags:
+  - isam
+  - ibm
+  - configure
+  - attributes
+
+dependencies:
+  - start_config

aac/configure_access_control_attributes/tasks/main.yml

@@ -0,0 +1,37 @@
+# main task to configure access control attributes
+# example:
+#   access_control_attributes:
+#     - name: testAttribute
+#       description: attribute for policy decision
+#       attributeURI: testAttribute
+#       type:
+#         policy: true
+#         risk: false
+#       category: Environment
+#       datatype: Boolean
+#       predefined: false
+#       issuer: ""
+#       matcher: 1
+#       storageDomain:
+#         device: false
+#         session: false
+#         behavior: false
+---
+- name: Configure access control attributes
+  isam:
+    appliance: "{{ inventory_hostname }}"
+    adminProxyProtocol: "{{ adminProxyProtocol | default(omit) }}"
+    adminProxyHostname: "{{ adminProxyHostname | default(omit) }}"
+    adminProxyPort: "{{ adminProxyPort | default(omit) }}"
+    adminProxyApplianceShortName: "{{ adminProxyApplianceShortName | default(omit) }}"
+    omitAdminProxy: "{{ omitAdminProxy | default(omit) }}"
+    username:  "{{ username }}"
+    password:  "{{ password }}"
+    lmi_port:  "{{ port | default(omit) }}"
+    log:       "{{ log_level | default(omit) }}"
+    force:     "{{ force | default(omit) }}"
+    action: ibmsecurity.isam.aac.attributes.set
+    isamapi: "{{ item }}"
+  when: item is defined
+  with_items: "{{ access_control_attributes }}"
+  notify: Commit Changes