Service account role grants

The service_account_role_grants section is used to define what roles the Notification Service is granted in other modules.

In this example, the Notification Service is granted the QuickReactor role in the smdp module (Deviation Processor). This allows it to interact with that module in a specific way, based on the permissions associated with the QuickReactor role.

Role configuration

service_account_role_grants:
  - target_module: smdp
    name: QuickReactor
    bci_only: false

Field descriptions

Field Description

Field	Description
`target_module`	The module where the role is applied. In this case, `smdp` refers to the Deviation Processor module.
`name`	The name of the role that the Notification Service is granted. For example, `QuickReactor` may allow the service to trigger or respond to deviation events.
`bci_only`	Whether this role is limited to BCI tenants. If `true`, the role is available only in BCI tenant environments. If `false`, it applies to all tenants.

target_module

The module where the role is applied. In this case, smdp refers to the Deviation Processor module.

name

The name of the role that the Notification Service is granted. For example, QuickReactor may allow the service to trigger or respond to deviation events.

bci_only

Whether this role is limited to BCI tenants. If true, the role is available only in BCI tenant environments. If false, it applies to all tenants.

Purpose

This setup enables the Notification Service to act on or react to events within the Deviation Processor module by assigning it the appropriate role.