Create Resource Group Access Policy
Now is most interesting part
Go to Access Policies Page
So, here we must assign access to all actions to Portfolio Entity (if you do it for other entities, replace Portfolio with other Model Name)
Here is full JSON of that policy
{
"Version": "2023-01-01",
"Statement": [
{
"Action": [
"finmars:Portfolio:create",
"finmars:Portfolio:update",
"finmars:Portfolio:destroy",
"finmars:Portfolio:bulk_delete",
"finmars:Portfolio:bulk_restore",
"finmars:Portfolio:delete_preview",
"finmars:Portfolio:list_ev_group",
"finmars:Portfolio:list_ev_item",
"finmars:Portfolio:list"
],
"Effect": "Allow",
"Resource": [
"frn:finmars:iam:resourcegroup:portfolio_group_a"
],
"Principal": "*"
}
]
}
So, please NOTE BENE
"Resource": [
"frn:finmars:iam:resourcegroup:portfolio_group_a"
],
Here ins Resource property
We must add FRN of our Resource Group, so - frn:finmars:iam:resourcegroup:portfolio_group_a
Thats it!
Now lets go to Member Page
Go to Attached Access Policies
And attach our new Access Policy
Save Member and thats it!
Now its all done, IAM will gave access to that portfolio that Member