/
Grouper Training - Privileges - Lesson: Attribute privileges

Grouper Training - Privileges - Lesson: Attribute privileges

Jul 12, 2026

Getting started

Connect to your VM

Learning Objectives

  • Attribute privileges

Exercise: Show attribute privileges

Open on browser

Log in as banderson

Navigate to the "etc:attribute" folder

Create attribute definition: TestFolderFlagDef

  • Type: attribute

  • Assign to: folders

  • Value: no value (marker)

Create an attribute name in etc:attribute, name: TestFolderFlag

Navigate to TestFolderFlagDef

Click on privileges tab

Grant READ to jsmith

Navigate to test folder

More actions → attribute assignments

Assign TestFolderFlag

Open another browser (not just a tab since cookies are shared)

Log in as jsmith

Navigate to "test" folder

Try to see attribute under More actions → attribute assignments

banderson browser:

  • Navigate to test folder

  • Privileges tab

  • Grant "attribute read" to jsmith

jsmith browser:

  • Navigate to "test" folder

  • Try to see attribute under More actions → attribute assignments

banderson browser:

  • Set attestation for the test folder

  • show folder attributes

jsmith browser:

  • show folder attributes

banderson browser:

  • Assign UPDATE to the attribute definition to jsmith

jsmith browser:

  • Can jsmith delete the folder attribute?

banderson browser:

  • grant ATTR_UPDATE to the test folder for jsmith

jsmith browser:

  • Can jsmith delete the folder attribute now?