Scenario #9470: Global Admin Without Assumed Role Sees All Subjects

This scenario verifies that a global admin who has not assumed any role sees all subjects across all realms.

Properties

Expected

name	value
expectedSubjectNames	[   { “name”: “hsh-alex_superuser” },   { “name”: “hsh-fran_superuser” },   { “name”: “tst-customer_admin_xxx” },   { “name”: “/hsh-Hostmasters” },   { “name”: “/xyz-Service” } ]

Fetch visible RBAC subjects

HTTP GET "/api/rbac/subjects" \
  -H "Authorization: Bearer $HSADMINNG_JWT_BEARER" \
  `# {` \
  `#   "comment" : "a global admin without an assumed role",` \
  `#   "sub" : "uuid<hsh-alex_superuser>"` \
  `# }`
=> status: 200 OK 
[
  {
    "uuid" : "242a0005-0000-0000-0000-000000000005",
    "name" : "abc-peter.smith",
    "organization" : "abc",
    "type" : "USER"
  },
  {
    "uuid" : "ba2da4ec-1b23-4ecb-9f83-c4c75f187aea",
    "name" : "/abc-Team",
    "organization" : "abc",
    "type" : "GROUP"
  },
  {
    "uuid" : "242a0006-0000-0000-0000-000000000006",
    "name" : "def-peter.smith",
    "organization" : "def",
    "type" : "USER"
  },
  {
    "uuid" : "ba600783-cdd0-4616-9bf6-9d876ad5d40b",
    "name" : "/def-Team",
    "organization" : "def",
    "type" : "GROUP"
  },
  {
    "uuid" : "40c21151-9f4b-50f2-9755-a69fcb7d4d7a",
    "name" : "hsadminng.provisioning.key",
    "organization" : "hsadminng",
    "type" : "API_KEY"
  },
  "..."
]

---

generated on 2026-08-10 03:08:26 for branch HEAD