[PLAT-16129][YBA CLI] RBAC APIs - 1

Summary: Add commands corresponding to RBAC APIs. RBAC Command ``` yba rbac Manage YugabyteDB Anywhere RBAC (Role-Based Access Control) Usage: yba rbac [flags] yba rbac [command] Available Commands: permission Manage YugabyteDB Anywhere RBAC permissions role Manage YugabyteDB Anywhere RBAC roles Flags: -h, --help help for rbac Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) ``` Permission command ``` yba rbac permission Manage YugabyteDB Anywhere RBAC permissions Usage: yba rbac permission [flags] yba rbac permission [command] Available Commands: describe Describe a YugabyteDB Anywhere RBAC permission list List YugabyteDB Anywhere permissions Flags: -h, --help help for permission Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) Use "yba rbac permission [command] --help" for more information about a command. ``` List Permission ``` yba rbac permission list List YugabyteDB Anywhere permissions Usage: yba rbac permission list [flags] Aliases: list, ls Examples: yba rbac permission list Flags: -n, --name string [Optional] Name of the permission. Quote name if it contains space. --resource-type string [Optional] Resource type of the permission. Allowed values: universe, role, user, other. If not specified, all resource types are returned. -h, --help help for list Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) ``` Describe Persmiison ``` yba rbac permission describe -h Describe a RBAC permission in YugabyteDB Anywhere Usage: yba rbac permission describe [flags] Aliases: describe, get Examples: yba rbac permission describe --name <permission-name> Flags: -n, --name string [Required] Name of the permission. Quote name if it contains space. -h, --help help for describe Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) ``` Role command ``` yba rbac role Manage YugabyteDB Anywhere RBAC roles Usage: yba rbac role [flags] yba rbac role [command] Available Commands: create Create YugabyteDB Anywhere RBAC roles delete Delete a YugabyteDB Anywhere role describe Describe a YugabyteDB Anywhere RBAC role list List YugabyteDB Anywhere roles update Update a YugabyteDB Anywhere role Flags: -h, --help help for role Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) ``` List Role command ``` yba rbac role list List YugabyteDB Anywhere roles Usage: yba rbac role list [flags] Aliases: list, ls Examples: yba rbac role list Flags: -n, --name string [Optional] Name of the role. Quote name if it contains space. --type string [Optional] Role type. Allowed values: system, custom. If not specified, all role types are returned. -h, --help help for list Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) ``` Describe role: ``` yba rbac role describe -h Describe a RBAC role in YugabyteDB Anywhere Usage: yba rbac role describe [flags] Aliases: describe, get Examples: yba rbac role describe --name <role-name> Flags: -n, --name string [Required] Name of the role. Quote name if it contains space. -h, --help help for describe Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) ``` Delete role ``` yba rbac role delete -h Delete a role in YugabyteDB Anywhere Usage: yba rbac role delete [flags] Aliases: delete, remove, rm Examples: yba role delete --name <role-name> Flags: -n, --name string [Required] The name of the role to be deleted. -f, --force [Optional] Bypass the prompt for non-interactive usage. -h, --help help for delete Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) Create role ``` yba rbac role create -h Create YugabyteDB Anywhere RBAC roles Usage: yba rbac role create [flags] Aliases: create, add Examples: yba rbac role create --name <role-name> \ --permission resource-type=other::action=read \ --description <description> Flags: -n, --name string [Required] Name of the role. Quote name if it contains space. --description string [Optional] Description of the role. Quote description if it contains space. --permission stringArray [Required] Permissions associated with the role. Minimum number of required permissions = 1. Provide the following double colon (::) separated fields as key-value pairs: "resource-type=<resource-type>::action=<action>". Both are requires key-values. Allowed resource types are universe, role, user, other. Allowed actions are create, read, update, delete, pause_resume, backup_restore, update_role_bindings, update_profile, super_admin_actions, xcluster. Each permission needs to be added using a separate --permission flag. Example: --permission resource-type=other::action=delete --permission resource-type=universe::action=write -h, --help help for create Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) ``` Update role command: ``` yba rbac role update -h Update a role in YugabyteDB Anywhere Usage: yba rbac role update [flags] Aliases: update, edit Examples: yba rbac role update --name <role-name> \ --add-permission resource-type=other::action=create Flags: -n, --name string [Required] Role name to be updated. --add-permission stringArray [Optional] Add permissions to the role. Provide the following double colon (::) separated fields as key-value pairs: "resource-type=<resource-type>::action=<action>". Both are requires key-values. Allowed resource types are: universe, role, user, other. Allowed actions are: create, read, update, delete, pause_resume, backup_restore, update_role_bindings, update_profile, super_admin_actions, xcluster.Quote action if it contains space. Each permission needs to be added using a separate --add-permission flag. --remove-permission stringArray [Optional] Remove permissions from the role. Provide the following double colon (::) separated fields as key-value pairs: "resource-type=<resource-type>::action=<action>". Both are requires key-values. Allowed resource types are: universe, role, user, other. Allowed actions are: create, read, update, delete, pause_resume, backup_restore, update_role_bindings, update_profile, super_admin_actions, xcluster.Quote action if it contains space. Each permission needs to be removed using a separate --remove-permission flag. -h, --help help for update Global Flags: -a, --apiToken string YugabyteDB Anywhere api token. --config string Config file, defaults to $HOME/.yba-cli.yaml --debug Use debug mode, same as --logLevel debug. --disable-color Disable colors in output. (default false) -H, --host string YugabyteDB Anywhere Host (default "http://localhost:9000") -l, --logLevel string Select the desired log level format. Allowed values: debug, info, warn, error, fatal. (default "info") -o, --output string Select the desired output format. Allowed values: table, json, pretty. (default "table") --timeout duration Wait command timeout, example: 5m, 1h. (default 168h0m0s) --wait Wait until the task is completed, otherwise it will exit immediately. (default true) ``` Test Plan: `yba rbac permission list` ``` Name Resource Type Action Permission Valid On Resource Update Role ROLE UPDATE false Create Role ROLE CREATE false View Role ROLE READ false Delete Role ROLE DELETE false Delete User USER DELETE false Update Role Bindings USER UPDATE_ROLE_BINDINGS false Create User USER CREATE false Update User Profile USER UPDATE_PROFILE false View User USER READ false View Universe UNIVERSE READ true Manage XCluster UNIVERSE XCLUSTER true Update Universe UNIVERSE UPDATE true Create Universe UNIVERSE CREATE false Backup/Restore Universe UNIVERSE BACKUP_RESTORE true Pause/Resume Universe UNIVERSE PAUSE_RESUME true Delete Universe UNIVERSE DELETE true View Resource OTHER READ false Create Resource OTHER CREATE false Update Resource OTHER UPDATE false Delete Resource OTHER DELETE false Super Admin Actions OTHER SUPER_ADMIN_ACTIONS false ``` `yba rbac permission describe --name "View Universe"` ``` General Name Resource Type Action Permission Valid On Resource View Universe UNIVERSE READ true Permission Details Description Allows user to view a universe. Prerequisite Permissions Permission 1: Details Action Resource Type READ OTHER ``` `yba rbac role list` ``` Name UUID Role Type ReadOnly a392c6cc-a57d-4a04-acb8-0e1d4d1f1205 System BackupAdmin f201e3fc-845a-4b5f-9f84-052b6c24d1a3 System ConnectOnly 7b10ff16-5ac0-4cfe-b1ee-0a0673a5f86b System Admin 1c4f107e-a2a4-4b45-916b-3ea6a936e85e System SuperAdmin 5853e7a7-0a89-4472-a354-d473de7c21ae System Developer L2 bef2eb73-020a-45f1-a9c2-23a5877714d5 Custom Software L1 019e26b0-0ee2-476c-bb86-b85c20c26412 Custom ``` `yba rbac role get -n "Developer L2"` ``` General Name UUID Role Type Developer L2 bef2eb73-020a-45f1-a9c2-23a5877714d5 Custom Role Details Description Access to selected universes Created On Updated On Thu, 08 Feb 2024 03:12:41 +0000 Mon, 05 Aug 2024 05:49:24 +0000 Permissions Permission 1: Details Action Resource Type BACKUP_RESTORE UNIVERSE Permission 2: Details Action Resource Type READ UNIVERSE Permission 3: Details Action Resource Type PAUSE_RESUME UNIVERSE Permission 4: Details Action Resource Type READ OTHER Permission 5: Details Action Resource Type DELETE UNIVERSE Permission 6: Details Action Resource Type XCLUSTER UNIVERSE Permission 7: Details Action Resource Type UPDATE UNIVERSE ``` `yba rbac role create -n test-cli --permission resource-type=universe::action=delete --permission resource-type=universe::action=read --permission resource-type=other::action=read` ``` Name UUID Role Type test-cli f323efd8-90ea-4090-9b41-00922866aea0 Custom ``` `yba rbac role update -n test-cli --add-permission resource-type=universe::action=read` ``` Name UUID Role Type test-cli f323efd8-90ea-4090-9b41-00922866aea0 Custom ``` Reviewers: skurapati Reviewed By: skurapati Subscribers: yugaware Differential Revision: https://phorge.dev.yugabyte.com/D40222
yugabyte · Dec 3, 2024 · 59c7043 · 59c7043
1 parent ae22278
commit 59c7043
Show file tree

Hide file tree

Showing 43 changed files with 2,184 additions and 19 deletions.
diff --git a/managed/yba-cli/cmd/backup/create_backup.go b/managed/yba-cli/cmd/backup/create_backup.go
@@ -404,7 +404,7 @@ func init() {
 	createBackupCmd.Flags().String("category", "",
 		"[Optional] Category of the backup. "+
 			"If a universe has YBC enabled, then default value of category is YB_CONTROLLER. "+
-			"Allowed values: YB_BACKUP_SCRIPT, YB_CONTROLLER")
+			"Allowed values: yb_backup_script, yb_controller")
 	createBackupCmd.Flags().Bool("enable-verbose-logs", false,
 		"[Optional] Enable verbose logging while taking backup via \"yb_backup\" script. (default false)")
 	createBackupCmd.Flags().Int("parallelism", 8,

diff --git a/managed/yba-cli/cmd/backup/schedule/create_backup_schedule.go b/managed/yba-cli/cmd/backup/schedule/create_backup_schedule.go
@@ -462,7 +462,7 @@ func init() {
 	createBackupScheduleCmd.Flags().String("category", "",
 		"[Optional] Category of the backup. "+
 			"If a universe has YBC enabled, then default value of category is YB_CONTROLLER. "+
-			"Allowed values: YB_BACKUP_SCRIPT, YB_CONTROLLER")
+			"Allowed values: yb_backup_script, yb_controller")
 	createBackupScheduleCmd.Flags().Bool("sse", true,
 		"[Optional] Enable sse while persisting the data in AWS S3.")
 	createBackupScheduleCmd.Flags().Bool("enable-verbose-logs", false,

diff --git a/managed/yba-cli/cmd/rbac/permission/describe_permission.go b/managed/yba-cli/cmd/rbac/permission/describe_permission.go
@@ -0,0 +1,103 @@
+/*
+ * Copyright (c) YugaByte, Inc.
+ */
+
+package permission
+
+import (
+	"fmt"
+	"os"
+	"strings"
+
+	"github.com/sirupsen/logrus"
+	"github.com/spf13/cobra"
+	"github.com/spf13/viper"
+	ybaclient "github.com/yugabyte/platform-go-client"
+	"github.com/yugabyte/yugabyte-db/managed/yba-cli/cmd/util"
+	ybaAuthClient "github.com/yugabyte/yugabyte-db/managed/yba-cli/internal/client"
+	"github.com/yugabyte/yugabyte-db/managed/yba-cli/internal/formatter"
+	"github.com/yugabyte/yugabyte-db/managed/yba-cli/internal/formatter/rbac/permissioninfo"
+)
+
+var describePermissionCmd = &cobra.Command{
+	Use:     "describe",
+	Aliases: []string{"get"},
+	Short:   "Describe a YugabyteDB Anywhere RBAC permission",
+	Long:    "Describe a RBAC permission in YugabyteDB Anywhere",
+	Example: `yba rbac permission describe --name <permission-name>`,
+	PreRun: func(cmd *cobra.Command, args []string) {
+		permissionNameFlag, err := cmd.Flags().GetString("name")
+		if err != nil {
+			logrus.Fatalf(formatter.Colorize(err.Error()+"\n", formatter.RedColor))
+		}
+		if len(permissionNameFlag) == 0 {
+			cmd.Help()
+			logrus.Fatalln(
+				formatter.Colorize("No permission name found to describe\n", formatter.RedColor))
+		}
+	},
+	Run: func(cmd *cobra.Command, args []string) {
+		authAPI := ybaAuthClient.NewAuthAPIClientAndCustomer()
+
+		permissionListRequest := authAPI.ListPermissions()
+
+		rList, response, err := permissionListRequest.Execute()
+		if err != nil {
+			errMessage := util.ErrorFromHTTPResponse(response, err, "RBAC: Permission", "Describe")
+			logrus.Fatalf(formatter.Colorize(errMessage.Error()+"\n", formatter.RedColor))
+		}
+
+		r := make([]ybaclient.PermissionInfo, 0)
+
+		name, err := cmd.Flags().GetString("name")
+		if err != nil {
+			logrus.Fatalf(formatter.Colorize(err.Error()+"\n", formatter.RedColor))
+		}
+		if len(strings.TrimSpace(name)) > 0 {
+			for _, p := range rList {
+				if strings.Contains(strings.ToLower(p.GetName()), strings.ToLower(name)) {
+					r = append(r, p)
+				}
+			}
+		} else {
+			r = rList
+		}
+
+		if len(r) > 0 && util.IsOutputType(formatter.TableFormatKey) {
+			fullPermissionContext := *permissioninfo.NewFullPermissionInfoContext()
+			fullPermissionContext.Output = os.Stdout
+			fullPermissionContext.Format = permissioninfo.NewFullPermissionInfoFormat(
+				viper.GetString("output"),
+			)
+			fullPermissionContext.SetFullPermissionInfo(r[0])
+			fullPermissionContext.Write()
+			return
+		}
+
+		if len(r) < 1 {
+			logrus.Fatalf(
+				formatter.Colorize(
+					fmt.Sprintf("No permissions with name: %s found\n", name),
+					formatter.RedColor,
+				))
+		}
+
+		permissionCtx := formatter.Context{
+			Command: "describe",
+			Output:  os.Stdout,
+			Format:  permissioninfo.NewPermissionInfoFormat(viper.GetString("output")),
+		}
+		permissioninfo.Write(permissionCtx, r)
+
+	},
+}
+
+func init() {
+
+	describePermissionCmd.Flags().SortFlags = false
+
+	describePermissionCmd.Flags().StringP("name", "n", "",
+		"[Required] Name of the permission. Quote name if it contains space.")
+	describePermissionCmd.MarkFlagRequired("name")
+
+}
diff --git a/managed/yba-cli/cmd/rbac/permission/list_permission.go b/managed/yba-cli/cmd/rbac/permission/list_permission.go
@@ -0,0 +1,110 @@
+/*
+ * Copyright (c) YugaByte, Inc.
+ */
+
+package permission
+
+import (
+	"net/http"
+	"os"
+	"strings"
+
+	"github.com/sirupsen/logrus"
+	"github.com/spf13/cobra"
+	ybaclient "github.com/yugabyte/platform-go-client"
+
+	"github.com/spf13/viper"
+	"github.com/yugabyte/yugabyte-db/managed/yba-cli/cmd/util"
+	ybaAuthClient "github.com/yugabyte/yugabyte-db/managed/yba-cli/internal/client"
+	"github.com/yugabyte/yugabyte-db/managed/yba-cli/internal/formatter"
+	"github.com/yugabyte/yugabyte-db/managed/yba-cli/internal/formatter/rbac/permissioninfo"
+)
+
+var listPermissionCmd = &cobra.Command{
+	Use:     "list",
+	Aliases: []string{"ls"},
+	Short:   "List YugabyteDB Anywhere permissions",
+	Long:    "List YugabyteDB Anywhere permissions",
+	Example: `yba rbac permission list`,
+	Run: func(cmd *cobra.Command, args []string) {
+		authAPI := ybaAuthClient.NewAuthAPIClientAndCustomer()
+
+		permissionListRequest := authAPI.ListPermissions()
+		// filter by resourceType and/or by permission code
+		resourceType, err := cmd.Flags().GetString("resource-type")
+		if err != nil {
+			logrus.Fatalf(formatter.Colorize(err.Error()+"\n", formatter.RedColor))
+		}
+
+		rList := make([]ybaclient.PermissionInfo, 0)
+		var response *http.Response
+		if len(strings.TrimSpace(resourceType)) > 0 {
+			permissionListRequest = permissionListRequest.ResourceType(
+				strings.ToUpper(resourceType),
+			)
+			rList, response, err = permissionListRequest.Execute()
+			if err != nil {
+				errMessage := util.ErrorFromHTTPResponse(response, err, "RBAC: Permission", "List")
+				logrus.Fatalf(formatter.Colorize(errMessage.Error()+"\n", formatter.RedColor))
+			}
+		} else {
+			resourceTypes := []string{
+				util.RoleResourceType,
+				util.UserResourceType,
+				util.UniverseResourceType,
+				util.OtherResourceType,
+			}
+			for _, c := range resourceTypes {
+				permissionListRequest = permissionListRequest.ResourceType(c)
+				rCode, response, err := permissionListRequest.Execute()
+				if err != nil {
+					errMessage := util.ErrorFromHTTPResponse(response, err, "RBAC: Permission", "List")
+					logrus.Fatalf(formatter.Colorize(errMessage.Error()+"\n", formatter.RedColor))
+				}
+				rList = append(rList, rCode...)
+			}
+		}
+
+		r := make([]ybaclient.PermissionInfo, 0)
+
+		name, err := cmd.Flags().GetString("name")
+		if err != nil {
+			logrus.Fatalf(formatter.Colorize(err.Error()+"\n", formatter.RedColor))
+		}
+		if len(strings.TrimSpace(name)) > 0 {
+			for _, p := range rList {
+				if strings.Contains(strings.ToLower(p.GetName()), strings.ToLower(name)) {
+					r = append(r, p)
+				}
+			}
+		} else {
+			r = rList
+		}
+
+		permissionCtx := formatter.Context{
+			Command: "list",
+			Output:  os.Stdout,
+			Format:  permissioninfo.NewPermissionInfoFormat(viper.GetString("output")),
+		}
+		if len(r) < 1 {
+			if util.IsOutputType(formatter.TableFormatKey) {
+				logrus.Info("No permissions found\n")
+			} else {
+				logrus.Info("[]\n")
+			}
+			return
+		}
+		permissioninfo.Write(permissionCtx, r)
+
+	},
+}
+
+func init() {
+	listPermissionCmd.Flags().SortFlags = false
+
+	listPermissionCmd.Flags().StringP("name", "n", "",
+		"[Optional] Name of the permission. Quote name if it contains space.")
+	listPermissionCmd.Flags().String("resource-type", "",
+		"[Optional] Resource type of the permission. Allowed values: "+
+			"universe, role, user, other. If not specified, all resource types are returned.")
+}
diff --git a/managed/yba-cli/cmd/rbac/permission/permission.go b/managed/yba-cli/cmd/rbac/permission/permission.go
@@ -0,0 +1,25 @@
+/*
+ * Copyright (c) YugaByte, Inc.
+ */
+
+package permission
+
+import (
+	"github.com/spf13/cobra"
+)
+
+// PermissionCmd set of commands are used to manage Permission in YugabyteDB Anywhere
+var PermissionCmd = &cobra.Command{
+	Use:   "permission",
+	Short: "Manage YugabyteDB Anywhere RBAC permissions",
+	Long:  "Manage YugabyteDB Anywhere RBAC permissions",
+	Run: func(cmd *cobra.Command, args []string) {
+		cmd.Help()
+	},
+}
+
+func init() {
+
+	PermissionCmd.AddCommand(listPermissionCmd)
+	PermissionCmd.AddCommand(describePermissionCmd)
+}
diff --git a/managed/yba-cli/cmd/rbac/rbac.go b/managed/yba-cli/cmd/rbac/rbac.go
@@ -0,0 +1,26 @@
+/*
+ * Copyright (c) YugaByte, Inc.
+ */
+
+package rbac
+
+import (
+	"github.com/spf13/cobra"
+	"github.com/yugabyte/yugabyte-db/managed/yba-cli/cmd/rbac/permission"
+	"github.com/yugabyte/yugabyte-db/managed/yba-cli/cmd/rbac/role"
+)
+
+// RBACCmd set of commands are used to manage RBAC in YugabyteDB Anywhere
+var RBACCmd = &cobra.Command{
+	Use:   "rbac",
+	Short: "Manage YugabyteDB Anywhere RBAC (Role-Based Access Control)",
+	Long:  "Manage YugabyteDB Anywhere RBAC (Role-Based Access Control)",
+	Run: func(cmd *cobra.Command, args []string) {
+		cmd.Help()
+	},
+}
+
+func init() {
+	RBACCmd.AddCommand(permission.PermissionCmd)
+	RBACCmd.AddCommand(role.RoleCmd)
+}