{
  "schema_version": 2,
  "id": "operate/kubernetes/reference/api/redis_enterprise_role_api",
  "title": "RedisEnterpriseRole API Reference",
  "url": "https://redis.io/docs/latest/operate/kubernetes/8.2.0/reference/api/redis_enterprise_role_api/",
  "summary": "",
  "content": "\napiVersion:\n\n\n- [app.redislabs.com/v1alpha1](#appredislabscomv1alpha1)\n\n\n\n\n# app.redislabs.com/v1alpha1\n\n\n\n\nRedisEnterpriseRole is a scoped role definition. It grants users access to selected databases within a Redis Enterprise Cluster.\n\n\u003ctable\u003e\n    \u003cthead\u003e\n        \u003ctr\u003e\n            \u003cth\u003eName\u003c/th\u003e\n            \u003cth\u003eType\u003c/th\u003e\n            \u003cth\u003eDescription\u003c/th\u003e\n            \u003cth\u003eRequired\u003c/th\u003e\n        \u003c/tr\u003e\n    \u003c/thead\u003e\n    \u003ctbody\u003e\u003ctr\u003e\n      \u003ctd\u003eapiVersion\u003c/td\u003e\n      \u003ctd\u003estring\u003c/td\u003e\n      \u003ctd\u003eapp.redislabs.com/v1alpha1\u003c/td\u003e\n      \u003ctd\u003etrue\u003c/td\u003e\n      \u003c/tr\u003e\n      \u003ctr\u003e\n      \u003ctd\u003ekind\u003c/td\u003e\n      \u003ctd\u003estring\u003c/td\u003e\n      \u003ctd\u003eRedisEnterpriseRole\u003c/td\u003e\n      \u003ctd\u003etrue\u003c/td\u003e\n      \u003c/tr\u003e\n      \u003ctr\u003e\n      \u003ctd\u003e\u003ca href=\"https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.27/#objectmeta-v1-meta\"\u003emetadata\u003c/a\u003e\u003c/td\u003e\n      \u003ctd\u003eobject\u003c/td\u003e\n      \u003ctd\u003eRefer to the Kubernetes API documentation for the fields of the `metadata` field.\u003c/td\u003e\n      \u003ctd\u003etrue\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"#spec\"\u003espec\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eobject\u003c/td\u003e\n        \u003ctd\u003e\n          RedisEnterpriseRoleSpec defines the desired state of a RedisEnterpriseRole.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"#status\"\u003estatus\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eobject\u003c/td\u003e\n        \u003ctd\u003e\n          RedisEnterpriseRoleStatus defines the observed state of a Redis Enterprise role object. This status type is used by both RedisEnterpriseClusterRole and RedisEnterpriseRole which share the same status structure.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003c/tbody\u003e\n\u003c/table\u003e\n\n\n### spec\n\u003csup\u003e\u003csup\u003e[↩ Parent](#)\u003c/sup\u003e\u003c/sup\u003e\n\nRedisEnterpriseRoleSpec defines the desired state of a RedisEnterpriseRole.\n\n\u003ctable\u003e\n    \u003cthead\u003e\n        \u003ctr\u003e\n            \u003cth\u003eName\u003c/th\u003e\n            \u003cth\u003eType\u003c/th\u003e\n            \u003cth\u003eDescription\u003c/th\u003e\n            \u003cth\u003eRequired\u003c/th\u003e\n        \u003c/tr\u003e\n    \u003c/thead\u003e\n    \u003ctbody\u003e\u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"#specscopes\"\u003escopes\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003e[]object\u003c/td\u003e\n        \u003ctd\u003e\n          Scopes define the databases to which this role applies.\nEach scope references a RedisEnterpriseDatabase by name or selector (kind\nRedisEnterpriseDatabase or empty), or an internal Redis Enterprise database\nby name (kind 'bdb', name only).\nFor 'bdb' scopes the role grants management access only; its ACL is not bound\nto that database's permissions.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003etrue\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"#specacl\"\u003eacl\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eobject\u003c/td\u003e\n        \u003ctd\u003e\n          ACL defines the data access permissions granted by this scoped role.\nReferences a RedisEnterpriseACL (kind RedisEnterpriseACL or empty) or an\ninternal Redis Enterprise ACL by name (kind 'redis_acl').\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003emanagementRole\u003c/td\u003e\n        \u003ctd\u003eenum\u003c/td\u003e\n        \u003ctd\u003e\n          ManagementRole is the named set of Redis Enterprise management permissions assigned to this scoped role. RedisEnterpriseRole supports only database-scoped management roles. If omitted, the role uses the None management role.\u003cbr/\u003e\n          \u003cbr/\u003e\n            \u003ci\u003eEnum\u003c/i\u003e: DBMember, DBViewer, None\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003c/tbody\u003e\n\u003c/table\u003e\n\n\n### spec.scopes[]\n\u003csup\u003e\u003csup\u003e[↩ Parent](#spec)\u003c/sup\u003e\u003c/sup\u003e\n\nA reference to another object(s), either directly by name, or via a label selector.\n\n\u003ctable\u003e\n    \u003cthead\u003e\n        \u003ctr\u003e\n            \u003cth\u003eName\u003c/th\u003e\n            \u003cth\u003eType\u003c/th\u003e\n            \u003cth\u003eDescription\u003c/th\u003e\n            \u003cth\u003eRequired\u003c/th\u003e\n        \u003c/tr\u003e\n    \u003c/thead\u003e\n    \u003ctbody\u003e\u003ctr\u003e\n        \u003ctd\u003ekind\u003c/td\u003e\n        \u003ctd\u003eenum\u003c/td\u003e\n        \u003ctd\u003e\n          Kind of the referent.\u003cbr/\u003e\n          \u003cbr/\u003e\n            \u003ci\u003eEnum\u003c/i\u003e: , RedisEnterpriseDatabase, bdb\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003ename\u003c/td\u003e\n        \u003ctd\u003estring\u003c/td\u003e\n        \u003ctd\u003e\n          Name of the referent.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"#specscopesselector\"\u003eselector\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eobject\u003c/td\u003e\n        \u003ctd\u003e\n          Selector based on label attached to the object.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003c/tbody\u003e\n\u003c/table\u003e\n\n\n### spec.scopes[].selector\n\u003csup\u003e\u003csup\u003e[↩ Parent](#specscopes)\u003c/sup\u003e\u003c/sup\u003e\n\nSelector based on label attached to the object.\n\n\u003ctable\u003e\n    \u003cthead\u003e\n        \u003ctr\u003e\n            \u003cth\u003eName\u003c/th\u003e\n            \u003cth\u003eType\u003c/th\u003e\n            \u003cth\u003eDescription\u003c/th\u003e\n            \u003cth\u003eRequired\u003c/th\u003e\n        \u003c/tr\u003e\n    \u003c/thead\u003e\n    \u003ctbody\u003e\u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"#specscopesselectormatchexpressions\"\u003ematchExpressions\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003e[]object\u003c/td\u003e\n        \u003ctd\u003e\n          matchExpressions is a list of label selector requirements. The requirements are ANDed.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003ematchLabels\u003c/td\u003e\n        \u003ctd\u003emap[string]string\u003c/td\u003e\n        \u003ctd\u003e\n          matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is \"key\", the operator is \"In\", and the values array contains only \"value\". The requirements are ANDed.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003c/tbody\u003e\n\u003c/table\u003e\n\n\n### spec.scopes[].selector.matchExpressions[]\n\u003csup\u003e\u003csup\u003e[↩ Parent](#specscopesselector)\u003c/sup\u003e\u003c/sup\u003e\n\nA label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.\n\n\u003ctable\u003e\n    \u003cthead\u003e\n        \u003ctr\u003e\n            \u003cth\u003eName\u003c/th\u003e\n            \u003cth\u003eType\u003c/th\u003e\n            \u003cth\u003eDescription\u003c/th\u003e\n            \u003cth\u003eRequired\u003c/th\u003e\n        \u003c/tr\u003e\n    \u003c/thead\u003e\n    \u003ctbody\u003e\u003ctr\u003e\n        \u003ctd\u003ekey\u003c/td\u003e\n        \u003ctd\u003estring\u003c/td\u003e\n        \u003ctd\u003e\n          key is the label key that the selector applies to.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003etrue\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003eoperator\u003c/td\u003e\n        \u003ctd\u003estring\u003c/td\u003e\n        \u003ctd\u003e\n          operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003etrue\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003evalues\u003c/td\u003e\n        \u003ctd\u003e[]string\u003c/td\u003e\n        \u003ctd\u003e\n          values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003c/tbody\u003e\n\u003c/table\u003e\n\n\n### spec.acl\n\u003csup\u003e\u003csup\u003e[↩ Parent](#spec)\u003c/sup\u003e\u003c/sup\u003e\n\nACL defines the data access permissions granted by this scoped role.\nReferences a RedisEnterpriseACL (kind RedisEnterpriseACL or empty) or an\ninternal Redis Enterprise ACL by name (kind 'redis_acl').\n\n\u003ctable\u003e\n    \u003cthead\u003e\n        \u003ctr\u003e\n            \u003cth\u003eName\u003c/th\u003e\n            \u003cth\u003eType\u003c/th\u003e\n            \u003cth\u003eDescription\u003c/th\u003e\n            \u003cth\u003eRequired\u003c/th\u003e\n        \u003c/tr\u003e\n    \u003c/thead\u003e\n    \u003ctbody\u003e\u003ctr\u003e\n        \u003ctd\u003ename\u003c/td\u003e\n        \u003ctd\u003estring\u003c/td\u003e\n        \u003ctd\u003e\n          Name of the referent.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003etrue\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003ekind\u003c/td\u003e\n        \u003ctd\u003eenum\u003c/td\u003e\n        \u003ctd\u003e\n          Kind of the referent.\u003cbr/\u003e\n          \u003cbr/\u003e\n            \u003ci\u003eEnum\u003c/i\u003e: , RedisEnterpriseACL, redis_acl\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003c/tbody\u003e\n\u003c/table\u003e\n\n\n### status\n\u003csup\u003e\u003csup\u003e[↩ Parent](#)\u003c/sup\u003e\u003c/sup\u003e\n\nRedisEnterpriseRoleStatus defines the observed state of a Redis Enterprise role object. This status type is used by both RedisEnterpriseClusterRole and RedisEnterpriseRole which share the same status structure.\n\n\u003ctable\u003e\n    \u003cthead\u003e\n        \u003ctr\u003e\n            \u003cth\u003eName\u003c/th\u003e\n            \u003cth\u003eType\u003c/th\u003e\n            \u003cth\u003eDescription\u003c/th\u003e\n            \u003cth\u003eRequired\u003c/th\u003e\n        \u003c/tr\u003e\n    \u003c/thead\u003e\n    \u003ctbody\u003e\u003ctr\u003e\n        \u003ctd\u003eobservedGeneration\u003c/td\u003e\n        \u003ctd\u003einteger\u003c/td\u003e\n        \u003ctd\u003e\n          The most recent generation of this resource that was observed and acted upon by the controller.\u003cbr/\u003e\n          \u003cbr/\u003e\n            \u003ci\u003eFormat\u003c/i\u003e: int64\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003ctr\u003e\n        \u003ctd\u003euid\u003c/td\u003e\n        \u003ctd\u003estring\u003c/td\u003e\n        \u003ctd\u003e\n          The internal UID of the Role object defined in the Redis Enterprise Cluster.\u003cbr/\u003e\n        \u003c/td\u003e\n        \u003ctd\u003efalse\u003c/td\u003e\n      \u003c/tr\u003e\u003c/tbody\u003e\n\u003c/table\u003e\n",
  "tags": ["docs","operate","kubernetes"],
  "last_updated": "2026-10-19T14:33:15-05:00"
}