Add maut (#468)

Co-authored-by: Jonas Plum <git@jonasplum.de>
2026-01-24 15:03:27 +01:00 · 2022-10-01 21:38:13 +02:00
parent 4eb0658888
commit f73e91d142
56 changed files with 402 additions and 1760 deletions
--- a/generated/api/api.go
+++ b/generated/api/api.go
@@ -7,7 +7,6 @@ import (
 	"fmt"
 	"net/http"
 	"strconv"
-	"strings"

 	"github.com/go-chi/chi/v5"
 	"github.com/xeipuuv/gojsonschema"
@@ -59,12 +58,30 @@ func parseQueryBool(r *http.Request, s string) (bool, error) {
 }

 func parseQueryStringArray(r *http.Request, key string) ([]string, error) {
-	return parseQueryArray(r, key), nil
+	stringArray, ok := r.URL.Query()[key]
+	if !ok {
+		return nil, nil
+	}
+	return removeEmpty(stringArray), nil
+}
+
+func removeEmpty(l []string) []string {
+	var stringArray []string
+	for _, s := range l {
+		if s == "" {
+			continue
+		}
+		stringArray = append(stringArray, s)
+	}
+
+	return stringArray
 }

 func parseQueryBoolArray(r *http.Request, key string) ([]bool, error) {
-	stringArray := parseQueryArray(r, key)
-
+	stringArray, ok := r.URL.Query()[key]
+	if !ok {
+		return nil, nil
+	}
 	var boolArray []bool
 	for _, s := range stringArray {
 		if s == "" {
@@ -80,33 +97,6 @@ func parseQueryBoolArray(r *http.Request, key string) ([]bool, error) {
 	return boolArray, nil
 }

-func parseQueryArray(r *http.Request, key string) []string {
-	stringArray, ok := r.URL.Query()[key]
-	if !ok {
-		return nil
-	}
-
-	if len(stringArray) == 0 {
-		return nil
-	}
-
-	stringArray = strings.Split(stringArray[0], ",")
-
-	return removeEmpty(stringArray)
-}
-
-func removeEmpty(l []string) []string {
-	var stringArray []string
-	for _, s := range l {
-		if s == "" {
-			continue
-		}
-		stringArray = append(stringArray, s)
-	}
-
-	return stringArray
-}
-
 func parseQueryOptionalInt(r *http.Request, key string) (*int, error) {
 	s := r.URL.Query().Get(key)
 	if s == "" {
--- a/generated/api/api_test.go
+++ b/generated/api/api_test.go
@@ -1,86 +0,0 @@
-package api
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"reflect"
-	"testing"
-)
-
-func Test_parseQueryOptionalBoolArray(t *testing.T) {
-	type args struct {
-		r   *http.Request
-		key string
-	}
-	tests := []struct {
-		name    string
-		args    args
-		want    []bool
-		wantErr bool
-	}{
-		{
-			name: "bool array",
-			args: args{
-				r: httptest.NewRequest(
-					http.MethodGet,
-					"https://try.catalyst-soar.com/api/tickets?type=alert&offset=0&count=10&sort=status%2Cowner%2Ccreated&desc=true%2Cfalse%2Cfalse&query=status+%3D%3D+%27open%27+AND+%28owner+%3D%3D+%27eve%27+OR+%21owner%29",
-					nil,
-				),
-				key: "desc",
-			},
-			want:    []bool{true, false, false},
-			wantErr: false,
-		},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			got, err := parseQueryOptionalBoolArray(tt.args.r, tt.args.key)
-			if (err != nil) != tt.wantErr {
-				t.Errorf("parseQueryOptionalBoolArray() error = %v, wantErr %v", err, tt.wantErr)
-				return
-			}
-			if !reflect.DeepEqual(got, tt.want) {
-				t.Errorf("parseQueryOptionalBoolArray() got = %v, want %v", got, tt.want)
-			}
-		})
-	}
-}
-
-func Test_parseQueryOptionalStringArray(t *testing.T) {
-	type args struct {
-		r   *http.Request
-		key string
-	}
-	tests := []struct {
-		name    string
-		args    args
-		want    []string
-		wantErr bool
-	}{
-		{
-			name: "string array",
-			args: args{
-				r: httptest.NewRequest(
-					http.MethodGet,
-					"https://try.catalyst-soar.com/api/tickets?type=alert&offset=0&count=10&sort=status%2Cowner%2Ccreated&desc=true%2Cfalse%2Cfalse&query=status+%3D%3D+%27open%27+AND+%28owner+%3D%3D+%27eve%27+OR+%21owner%29",
-					nil,
-				),
-				key: "sort",
-			},
-			want:    []string{"status", "owner", "created"},
-			wantErr: false,
-		},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			got, err := parseQueryOptionalStringArray(tt.args.r, tt.args.key)
-			if (err != nil) != tt.wantErr {
-				t.Errorf("parseQueryOptionalStringArray() error = %v, wantErr %v", err, tt.wantErr)
-				return
-			}
-			if !reflect.DeepEqual(got, tt.want) {
-				t.Errorf("parseQueryOptionalStringArray() got = %v, want %v", got, tt.want)
-			}
-		})
-	}
-}
--- a/generated/api/test_api.go
+++ b/generated/api/test_api.go
@@ -68,7 +68,7 @@ var Tests = []struct {
 		Args: Args{Method: "Get", URL: "/currentuser"},
 		Want: Want{
 			Status: 200,
-			Body:   map[string]interface{}{"apikey": false, "blocked": false, "id": "bob", "roles": []interface{}{"admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write"}},
+			Body:   map[string]interface{}{"apikey": false, "blocked": false, "id": "bob", "roles": []interface{}{"admin"}},
 		},
 	},

@@ -239,7 +239,7 @@ var Tests = []struct {
 		Args: Args{Method: "Get", URL: "/settings"},
 		Want: Want{
 			Status: 200,
-			Body:   map[string]interface{}{"artifactKinds": []interface{}{map[string]interface{}{"icon": "mdi-server", "id": "asset", "name": "Asset"}, map[string]interface{}{"icon": "mdi-bullseye", "id": "ioc", "name": "IOC"}}, "artifactStates": []interface{}{map[string]interface{}{"color": "info", "icon": "mdi-help-circle-outline", "id": "unknown", "name": "Unknown"}, map[string]interface{}{"color": "error", "icon": "mdi-skull", "id": "malicious", "name": "Malicious"}, map[string]interface{}{"color": "success", "icon": "mdi-check", "id": "clean", "name": "Clean"}}, "roles": []interface{}{"admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write"}, "ticketTypes": []interface{}{map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-alert", "id": "alert", "name": "Alerts"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-radioactive", "id": "incident", "name": "Incidents"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-fingerprint", "id": "investigation", "name": "Forensic Investigations"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-target", "id": "hunt", "name": "Threat Hunting"}}, "tier": "community", "timeformat": "yyyy-MM-dd hh:mm:ss", "version": "0.0.0-test"},
+			Body:   map[string]interface{}{"artifactKinds": []interface{}{map[string]interface{}{"icon": "mdi-server", "id": "asset", "name": "Asset"}, map[string]interface{}{"icon": "mdi-bullseye", "id": "ioc", "name": "IOC"}}, "artifactStates": []interface{}{map[string]interface{}{"color": "info", "icon": "mdi-help-circle-outline", "id": "unknown", "name": "Unknown"}, map[string]interface{}{"color": "error", "icon": "mdi-skull", "id": "malicious", "name": "Malicious"}, map[string]interface{}{"color": "success", "icon": "mdi-check", "id": "clean", "name": "Clean"}}, "ticketTypes": []interface{}{map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-alert", "id": "alert", "name": "Alerts"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-radioactive", "id": "incident", "name": "Incidents"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-fingerprint", "id": "investigation", "name": "Forensic Investigations"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-target", "id": "hunt", "name": "Threat Hunting"}}, "tier": "community", "timeformat": "yyyy-MM-dd hh:mm:ss", "version": "0.0.0-test"},
 		},
 	},

@@ -248,7 +248,7 @@ var Tests = []struct {
 		Args: Args{Method: "Post", URL: "/settings", Data: map[string]interface{}{"artifactKinds": []interface{}{map[string]interface{}{"icon": "mdi-server", "id": "asset", "name": "Asset"}, map[string]interface{}{"icon": "mdi-bullseye", "id": "ioc", "name": "IOC"}}, "artifactStates": []interface{}{map[string]interface{}{"color": "info", "icon": "mdi-help-circle-outline", "id": "unknown", "name": "Unknown"}, map[string]interface{}{"color": "error", "icon": "mdi-skull", "id": "malicious", "name": "Malicious"}, map[string]interface{}{"color": "success", "icon": "mdi-check", "id": "clean", "name": "Clean"}}, "timeformat": "yyyy-MM-dd hh:mm:ss"}},
 		Want: Want{
 			Status: 200,
-			Body:   map[string]interface{}{"artifactKinds": []interface{}{map[string]interface{}{"icon": "mdi-server", "id": "asset", "name": "Asset"}, map[string]interface{}{"icon": "mdi-bullseye", "id": "ioc", "name": "IOC"}}, "artifactStates": []interface{}{map[string]interface{}{"color": "info", "icon": "mdi-help-circle-outline", "id": "unknown", "name": "Unknown"}, map[string]interface{}{"color": "error", "icon": "mdi-skull", "id": "malicious", "name": "Malicious"}, map[string]interface{}{"color": "success", "icon": "mdi-check", "id": "clean", "name": "Clean"}}, "roles": []interface{}{"admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write"}, "ticketTypes": []interface{}{map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-alert", "id": "alert", "name": "Alerts"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-radioactive", "id": "incident", "name": "Incidents"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-fingerprint", "id": "investigation", "name": "Forensic Investigations"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-target", "id": "hunt", "name": "Threat Hunting"}}, "tier": "community", "timeformat": "yyyy-MM-dd hh:mm:ss", "version": "0.0.0-test"},
+			Body:   map[string]interface{}{"artifactKinds": []interface{}{map[string]interface{}{"icon": "mdi-server", "id": "asset", "name": "Asset"}, map[string]interface{}{"icon": "mdi-bullseye", "id": "ioc", "name": "IOC"}}, "artifactStates": []interface{}{map[string]interface{}{"color": "info", "icon": "mdi-help-circle-outline", "id": "unknown", "name": "Unknown"}, map[string]interface{}{"color": "error", "icon": "mdi-skull", "id": "malicious", "name": "Malicious"}, map[string]interface{}{"color": "success", "icon": "mdi-check", "id": "clean", "name": "Clean"}}, "ticketTypes": []interface{}{map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-alert", "id": "alert", "name": "Alerts"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-radioactive", "id": "incident", "name": "Incidents"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-fingerprint", "id": "investigation", "name": "Forensic Investigations"}, map[string]interface{}{"default_playbooks": []interface{}{}, "default_template": "default", "icon": "mdi-target", "id": "hunt", "name": "Threat Hunting"}}, "tier": "community", "timeformat": "yyyy-MM-dd hh:mm:ss", "version": "0.0.0-test"},
 		},
 	},

@@ -608,7 +608,7 @@ var Tests = []struct {
 		Args: Args{Method: "Get", URL: "/users"},
 		Want: Want{
 			Status: 200,
-			Body:   []interface{}{map[string]interface{}{"apikey": false, "blocked": false, "id": "bob", "roles": []interface{}{"admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write"}}, map[string]interface{}{"apikey": true, "blocked": false, "id": "script", "roles": []interface{}{"analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write"}}},
+			Body:   []interface{}{map[string]interface{}{"apikey": false, "blocked": false, "id": "bob", "roles": []interface{}{"admin"}}, map[string]interface{}{"apikey": true, "blocked": false, "id": "script", "roles": []interface{}{"engineer"}}},
 		},
 	},

@@ -617,7 +617,7 @@ var Tests = []struct {
 		Args: Args{Method: "Post", URL: "/users", Data: map[string]interface{}{"apikey": true, "blocked": false, "id": "syncscript", "roles": []interface{}{"analyst"}}},
 		Want: Want{
 			Status: 200,
-			Body:   map[string]interface{}{"blocked": false, "id": "syncscript", "roles": []interface{}{"analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read"}, "secret": "v39bOuobnlEljfWzjAgoKzhmnh1xSMxH"},
+			Body:   map[string]interface{}{"blocked": false, "id": "syncscript", "roles": []interface{}{"analyst"}, "secret": "v39bOuobnlEljfWzjAgoKzhmnh1xSMxH"},
 		},
 	},

@@ -626,7 +626,7 @@ var Tests = []struct {
 		Args: Args{Method: "Get", URL: "/users/script"},
 		Want: Want{
 			Status: 200,
-			Body:   map[string]interface{}{"apikey": true, "blocked": false, "id": "script", "roles": []interface{}{"analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write"}},
+			Body:   map[string]interface{}{"apikey": true, "blocked": false, "id": "script", "roles": []interface{}{"engineer"}},
 		},
 	},

@@ -635,7 +635,7 @@ var Tests = []struct {
 		Args: Args{Method: "Put", URL: "/users/bob", Data: map[string]interface{}{"apikey": false, "blocked": false, "id": "syncscript", "roles": []interface{}{"analyst", "admin"}}},
 		Want: Want{
 			Status: 200,
-			Body:   map[string]interface{}{"apikey": false, "blocked": false, "id": "bob", "roles": []interface{}{"admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write"}},
+			Body:   map[string]interface{}{"apikey": false, "blocked": false, "id": "bob", "roles": []interface{}{"analyst", "admin"}},
 		},
 	},

--- a/generated/catalyst.json
+++ b/generated/catalyst.json
@@ -225,7 +225,7 @@
                  "apikey" : false,
                  "blocked" : false,
                  "id" : "bob",
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "admin" ]
                }
              }
            },
@@ -1424,7 +1424,6 @@
                    "id" : "clean",
                    "name" : "Clean"
                  } ],
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ],
                  "ticketTypes" : [ {
                    "default_playbooks" : [ ],
                    "default_template" : "default",
@@ -1513,7 +1512,6 @@
                    "id" : "clean",
                    "name" : "Clean"
                  } ],
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ],
                  "ticketTypes" : [ {
                    "default_playbooks" : [ ],
                    "default_template" : "default",
@@ -5343,12 +5341,12 @@
                  "apikey" : false,
                  "blocked" : false,
                  "id" : "bob",
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "admin" ]
                }, {
                  "apikey" : true,
                  "blocked" : false,
                  "id" : "script",
-                  "roles" : [ "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "engineer" ]
                } ]
              }
            },
@@ -5386,7 +5384,7 @@
                "example" : {
                  "blocked" : false,
                  "id" : "syncscript",
-                  "roles" : [ "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read" ],
+                  "roles" : [ "analyst" ],
                  "secret" : "v39bOuobnlEljfWzjAgoKzhmnh1xSMxH"
                }
              }
@@ -5452,7 +5450,7 @@
                  "apikey" : true,
                  "blocked" : false,
                  "id" : "script",
-                  "roles" : [ "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "engineer" ]
                }
              }
            },
@@ -5501,7 +5499,7 @@
                  "apikey" : false,
                  "blocked" : false,
                  "id" : "bob",
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "analyst", "admin" ]
                }
              }
            },
--- a/generated/catalyst.yml
+++ b/generated/catalyst.yml
@@ -1631,38 +1631,7 @@ paths:
              blocked: false
              id: bob
              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - admin
          schema:
            $ref: '#/definitions/UserResponse'
      security:
@@ -2834,39 +2803,6 @@ paths:
                icon: mdi-check
                id: clean
                name: Clean
-              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
              ticketTypes:
              - default_playbooks: []
                default_template: default
@@ -2955,39 +2891,6 @@ paths:
                icon: mdi-check
                id: clean
                name: Clean
-              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
              ticketTypes:
              - default_playbooks: []
                default_template: default
@@ -7360,62 +7263,12 @@ paths:
              blocked: false
              id: bob
              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - admin
            - apikey: true
              blocked: false
              id: script
              roles:
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - engineer
          schema:
            items:
              $ref: '#/definitions/UserResponse'
@@ -7449,21 +7302,7 @@ paths:
              blocked: false
              id: syncscript
              roles:
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
+              - analyst
              secret: v39bOuobnlEljfWzjAgoKzhmnh1xSMxH
          schema:
            $ref: '#/definitions/NewUserResponse'
@@ -7510,26 +7349,7 @@ paths:
              blocked: false
              id: script
              roles:
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - engineer
          schema:
            $ref: '#/definitions/UserResponse'
      security:
@@ -7569,38 +7389,8 @@ paths:
              blocked: false
              id: bob
              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - analyst
+              - admin
          schema:
            $ref: '#/definitions/UserResponse'
      security:
--- a/generated/community.json
+++ b/generated/community.json
@@ -225,7 +225,7 @@
                  "apikey" : false,
                  "blocked" : false,
                  "id" : "bob",
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "admin" ]
                }
              }
            },
@@ -994,7 +994,6 @@
                    "id" : "clean",
                    "name" : "Clean"
                  } ],
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ],
                  "ticketTypes" : [ {
                    "default_playbooks" : [ ],
                    "default_template" : "default",
@@ -1083,7 +1082,6 @@
                    "id" : "clean",
                    "name" : "Clean"
                  } ],
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ],
                  "ticketTypes" : [ {
                    "default_playbooks" : [ ],
                    "default_template" : "default",
@@ -4913,12 +4911,12 @@
                  "apikey" : false,
                  "blocked" : false,
                  "id" : "bob",
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "admin" ]
                }, {
                  "apikey" : true,
                  "blocked" : false,
                  "id" : "script",
-                  "roles" : [ "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "engineer" ]
                } ]
              }
            },
@@ -4956,7 +4954,7 @@
                "example" : {
                  "blocked" : false,
                  "id" : "syncscript",
-                  "roles" : [ "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read" ],
+                  "roles" : [ "analyst" ],
                  "secret" : "v39bOuobnlEljfWzjAgoKzhmnh1xSMxH"
                }
              }
@@ -5022,7 +5020,7 @@
                  "apikey" : true,
                  "blocked" : false,
                  "id" : "script",
-                  "roles" : [ "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "engineer" ]
                }
              }
            },
@@ -5071,7 +5069,7 @@
                  "apikey" : false,
                  "blocked" : false,
                  "id" : "bob",
-                  "roles" : [ "admin:backup:read", "admin:backup:restore", "admin:dashboard:write", "admin:group:write", "admin:job:read", "admin:job:write", "admin:log:read", "admin:settings:write", "admin:ticket:delete", "admin:user:write", "admin:userdata:read", "admin:userdata:write", "analyst:automation:read", "analyst:currentsettings:write", "analyst:currentuser:read", "analyst:currentuserdata:read", "analyst:dashboard:read", "analyst:file", "analyst:group:read", "analyst:playbook:read", "analyst:rule:read", "analyst:settings:read", "analyst:template:read", "analyst:ticket:read", "analyst:ticket:write", "analyst:tickettype:read", "analyst:user:read", "engineer:automation:write", "engineer:playbook:write", "engineer:rule:write", "engineer:template:write", "engineer:tickettype:write" ]
+                  "roles" : [ "analyst", "admin" ]
                }
              }
            },
--- a/generated/community.yml
+++ b/generated/community.yml
@@ -1512,38 +1512,7 @@ paths:
              blocked: false
              id: bob
              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - admin
          schema:
            $ref: '#/definitions/UserResponse'
      security:
@@ -2422,39 +2391,6 @@ paths:
                icon: mdi-check
                id: clean
                name: Clean
-              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
              ticketTypes:
              - default_playbooks: []
                default_template: default
@@ -2543,39 +2479,6 @@ paths:
                icon: mdi-check
                id: clean
                name: Clean
-              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
              ticketTypes:
              - default_playbooks: []
                default_template: default
@@ -6948,62 +6851,12 @@ paths:
              blocked: false
              id: bob
              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - admin
            - apikey: true
              blocked: false
              id: script
              roles:
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - engineer
          schema:
            items:
              $ref: '#/definitions/UserResponse'
@@ -7037,21 +6890,7 @@ paths:
              blocked: false
              id: syncscript
              roles:
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
+              - analyst
              secret: v39bOuobnlEljfWzjAgoKzhmnh1xSMxH
          schema:
            $ref: '#/definitions/NewUserResponse'
@@ -7098,26 +6937,7 @@ paths:
              blocked: false
              id: script
              roles:
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - engineer
          schema:
            $ref: '#/definitions/UserResponse'
      security:
@@ -7157,38 +6977,8 @@ paths:
              blocked: false
              id: bob
              roles:
-              - admin:backup:read
-              - admin:backup:restore
-              - admin:dashboard:write
-              - admin:group:write
-              - admin:job:read
-              - admin:job:write
-              - admin:log:read
-              - admin:settings:write
-              - admin:ticket:delete
-              - admin:user:write
-              - admin:userdata:read
-              - admin:userdata:write
-              - analyst:automation:read
-              - analyst:currentsettings:write
-              - analyst:currentuser:read
-              - analyst:currentuserdata:read
-              - analyst:dashboard:read
-              - analyst:file
-              - analyst:group:read
-              - analyst:playbook:read
-              - analyst:rule:read
-              - analyst:settings:read
-              - analyst:template:read
-              - analyst:ticket:read
-              - analyst:ticket:write
-              - analyst:tickettype:read
-              - analyst:user:read
-              - engineer:automation:write
-              - engineer:playbook:write
-              - engineer:rule:write
-              - engineer:template:write
-              - engineer:tickettype:write
+              - analyst
+              - admin
          schema:
            $ref: '#/definitions/UserResponse'
      security: