Creating Keys
In order to use KMS with the Privacy Platform, keys must be created in Ionic.
To proceed, follow these steps:
Log in with the user ID of the persistor profile, create Keys adding the Privitar ‘key name’ as an ‘ionic_external_id’ attribute. Use the Create Keys with External ID approach (
https://dev.ionic.com/sdk/tasks/create-key-with-external-id
)Create a policy so the Service User configured in Creating Service User in Ionic Machina can access the Ionic keys. You can refer to the Ionic documentation to proceed:
https://dev.ionic.com/tutorials/policy/create-data-policy
Example 3. Impersonation exampleIf we want a user named
privitar
to impersonate an account namedservice-user
to access a key namedkey
, the policy must be configured with:service-user
is allowed to accesskey
.privitar
is allowed to accesskey
whenionic-delegated-external-id
isservice-user
.