https://cerbos.dev logo
#help
Title
# help
j

Jesum Yip

08/18/2023, 7:30 AM
when writing a policy, i see https://docs.cerbos.dev/cerbos/latest/policies/conditions.html has handy shortcuts to special variables like P, R, V, G. is there a way to get the derivedRole of a user in a principal policy?
something like
- expr: P.derivedRole == "xxxx"
o

oguzhan

08/18/2023, 8:12 AM
It is not possible to get it
j

Jesum Yip

08/18/2023, 8:29 AM
i came to the same conclusion because principal policies is supposed to override everything. so a derivedRole doesn't make sense anymore because it will be overridden.
2 Views