gazer 0.3.7 → 0.3.8

data/lib/gzr/commands/permission/set/rm.rb

@@ -0,0 +1,49 @@
+# The MIT License (MIT)
+
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
+
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+# frozen_string_literal: true
+
+require_relative '../../../command'
+require_relative '../../../modules/permission/set'
+
+module Gzr
+  module Commands
+    class Permission
+      class Set
+        class Delete < Gzr::Command
+          include Gzr::Permission::Set
+          def initialize(permission_set_id,options)
+            super()
+            @permission_set_id = permission_set_id
+            @options = options
+          end
+
+          def execute(input: $stdin, output: $stdout)
+            say_warning(@options) if @options[:debug]
+            with_session do
+             delete_permission_set(@permission_set_id)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/gzr/commands/permission/set.rb

@@ -0,0 +1,98 @@
+# The MIT License (MIT)
+
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
+
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+# frozen_string_literal: true
+
+require_relative '../subcommandbase'
+
+module Gzr
+  module Commands
+    class Permission
+      class Set < SubCommandBase
+
+        namespace :'permission set'
+
+        desc 'ls', 'List the permission sets in this server.'
+        method_option :help, aliases: '-h', type: :boolean,
+                             desc: 'Display usage information'
+        method_option :fields, type: :string, default: 'id,name,permissions,built_in,all_access',
+                             desc: 'Fields to display'
+        method_option :plain, type: :boolean, default: false,
+                             desc: 'print without any extra formatting'
+        method_option :csv, type: :boolean, default: false,
+                             desc: 'output in csv format per RFC4180'
+        def ls(*)
+          if options[:help]
+            invoke :help, ['ls']
+          else
+            require_relative 'set/ls'
+            Gzr::Commands::Permission::Set::Ls.new(options).execute
+          end
+        end
+
+        desc 'cat PERMISSION_SET_ID', 'Output json information about a permission set to screen or file'
+        method_option :help, aliases: '-h', type: :boolean,
+                             desc: 'Display usage information'
+        method_option :dir,  type: :string,
+                             desc: 'Directory to store output file'
+        method_option :trim, type: :boolean,
+                             desc: 'Trim output to minimal set of fields for later import'
+        def cat(permission_set_id)
+          if options[:help]
+            invoke :help, ['cat']
+          else
+            require_relative 'set/cat'
+            Gzr::Commands::Permission::Set::Cat.new(permission_set_id,options).execute
+          end
+        end
+
+        desc 'import FILE', 'Import a permission set from a file'
+        method_option :help, aliases: '-h', type: :boolean,
+                             desc: 'Display usage information'
+        method_option :force, type: :boolean,
+                             desc: 'Overwrite an existing permission set'
+        method_option :plain, type: :boolean, default: false,
+                             desc: 'print without any extra formatting'
+        def import(file)
+          if options[:help]
+            invoke :help, ['import']
+          else
+            require_relative 'set/import'
+            Gzr::Commands::Permission::Set::Import.new(file, options).execute
+          end
+        end
+
+        desc 'rm PERMISSION_SET_ID', 'Delete the permission_set given by PERMISSION_SET_ID'
+        method_option :help, aliases: '-h', type: :boolean,
+                             desc: 'Display usage information'
+        def rm(permission_set_id)
+          if options[:help]
+            invoke :help, ['delete']
+          else
+            require_relative 'set/rm'
+            Gzr::Commands::Permission::Set::Delete.new(permission_set_id,options).execute
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/gzr/commands/permission/tree.rb

@@ -0,0 +1,71 @@
+# The MIT License (MIT)
+
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
+
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+# frozen_string_literal: true
+
+require_relative '../../command'
+require_relative '../../modules/permission'
+require 'tty-tree'
+
+require_relative '../../command'
+
+module Gzr
+  module Commands
+    class Permission
+      class Tree < Gzr::Command
+        include Gzr::Permission
+        def initialize(options)
+          super()
+          @options = options
+        end
+
+        def execute(input: $stdin, output: $stdout)
+          say_warning(@options) if @options[:debug]
+          with_session do
+            data = query_all_permissions()
+            begin
+              say_ok "No permissions found"
+              return nil
+            end unless data && data.length > 0
+
+            tree_data = Hash.new
+
+            data.sort! { |a,b| a[:permission] <=> b[:permission] }
+            data.select {|e| e[:parent] == nil}.each do |e|
+              tree_data[e[:permission]] = [recurse_permissions(e[:permission], data)]
+            end
+
+            tree = TTY::Tree.new(tree_data)
+            output.puts tree.render
+          end
+        end
+
+        def recurse_permissions(permission, data)
+          tree_branch = Hash.new
+          data.select { |e| e[:parent] == permission }.each do |e|
+            tree_branch[e[:permission]] = [recurse_permissions(e[:permission], data)]
+          end
+          tree_branch
+        end
+      end
+    end
+  end
+end

data/lib/gzr/commands/{permissions.rb → permission.rb}

@@ -1,6 +1,6 @@
 # The MIT License (MIT)
 
-# Copyright (c) 2018 Mike DeAngelo Looker Data Sciences, Inc.
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
 
 # Permission is hereby granted, free of charge, to any person obtaining a copy of
 # this software and associated documentation files (the "Software"), to deal in
@@ -21,13 +21,16 @@
 
 # frozen_string_literal: true
 
-require 'thor'
+require_relative 'subcommandbase'
 
 module Gzr
   module Commands
-    class Permissions < Thor
+    class Permission < SubCommandBase
 
-      namespace :permissions
+      require_relative 'permission/set'
+      register Gzr::Commands::Permission::Set, 'set', 'set [SUBCOMMAND]', 'Commands pertaining to permission sets'
+
+      namespace :permission
 
       desc 'ls', 'List all available permissions'
       method_option :help, aliases: '-h', type: :boolean,
@@ -40,10 +43,23 @@ module Gzr
         if options[:help]
           invoke :help, ['ls']
         else
-          require_relative 'permissions/ls'
-          Gzr::Commands::Permissions::Ls.new(options).execute
+          require_relative 'permission/ls'
+          Gzr::Commands::Permission::Ls.new(options).execute
         end
       end
+
+      desc 'tree', 'List all available permissions in a tree'
+      method_option :help, aliases: '-h', type: :boolean,
+                           desc: 'Display usage information'
+      def tree(*)
+        if options[:help]
+          invoke :help, ['tree']
+        else
+          require_relative 'permission/tree'
+          Gzr::Commands::Permission::Tree.new(options).execute
+        end
+      end
+
     end
   end
 end

data/lib/gzr/commands/role/cat.rb

@@ -40,9 +40,10 @@ module Gzr
         def execute(input: $stdin, output: $stdout)
           say_warning("options: #{@options.inspect}") if @options[:debug]
           with_session do
-            data = query_role(@role_id)
-            write_file(@options[:dir] ? "Role_#{data.id}_#{data.name}.json" : nil, @options[:dir], nil, output) do |f|
-              f.puts JSON.pretty_generate(data.to_attrs)
+            data = query_role(@role_id)&.to_attrs
+            data = trim_role(data) if @options[:trim]
+            write_file(@options[:dir] ? "Role_#{data[:id]}_#{data[:name]}.json" : nil, @options[:dir], nil, output) do |f|
+              f.puts JSON.pretty_generate(data)
             end
           end
         end

data/lib/gzr/commands/role/create.rb

@@ -0,0 +1,51 @@
+# The MIT License (MIT)
+
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
+
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+# frozen_string_literal: true
+
+require_relative '../../command'
+require_relative '../../modules/role'
+
+module Gzr
+  module Commands
+    class Role
+      class Create < Gzr::Command
+        include Gzr::Role
+        def initialize(name,pset,mset, options)
+          super()
+          @name = name
+          @pset = pset
+          @mset = mset
+          @options = options
+        end
+
+        def execute(input: $stdin, output: $stdout)
+          folder = nil
+          with_session do
+            role = create_role(@name, @pset, @mset)
+            output.puts "Created role #{role[:id]} #{role[:name]}" unless @options[:plain]
+            output.puts role[:id] if @options[:plain]
+          end
+        end
+      end
+    end
+  end
+end

data/lib/gzr/commands/role.rb

@@ -1,6 +1,6 @@
 # The MIT License (MIT)
 
-# Copyright (c) 2018 Mike DeAngelo Looker Data Sciences, Inc.
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
 
 # Permission is hereby granted, free of charge, to any person obtaining a copy of
 # this software and associated documentation files (the "Software"), to deal in
@@ -132,6 +132,8 @@ module Gzr
                            desc: 'Display usage information'
       method_option :dir,  type: :string,
                            desc: 'Directory to get output file'
+      method_option :trim, type: :boolean,
+                           desc: 'Trim output to minimal set of fields for later import'
       def cat(role_id)
         if options[:help]
           invoke :help, ['cat']
@@ -158,6 +160,22 @@ module Gzr
           Gzr::Commands::Role::Ls.new(options).execute
         end
       end
+
+      desc 'create ROLE_NAME PERMISSION_SET_ID MODEL_SET_ID', "Create new role with the given permission and model sets"
+      method_option :help, aliases: '-h', type: :boolean,
+                           desc: 'Display usage information'
+      method_option :plain, type: :boolean, default: false,
+                           desc: 'print without any extra formatting'
+
+      def create(name, pset, mset)
+        if options[:help]
+          invoke :help, ['create']
+        else
+          require_relative 'role/create'
+          Gzr::Commands::Role::Create.new(name, pset, mset, options).execute
+        end
+      end
+
     end
   end
 end

data/lib/gzr/commands/subcommandbase.rb

@@ -1,6 +1,6 @@
 # The MIT License (MIT)
 
-# Copyright (c) 2018 Mike DeAngelo Looker Data Sciences, Inc.
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
 
 # Permission is hereby granted, free of charge, to any person obtaining a copy of
 # this software and associated documentation files (the "Software"), to deal in
@@ -34,7 +34,7 @@ module Gzr
       end
 
       def self.subcommand_prefix
-        self.name.gsub(%r{.*::}, '').gsub(%r{^[A-Z]}) { |match| match[0].downcase }.gsub(%r{[A-Z]}) { |match| "-#{match[0].downcase}" }
+        self.namespace
       end
     end
   end

data/lib/gzr/modules/model/set.rb

@@ -0,0 +1,123 @@
+# The MIT License (MIT)
+
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
+
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+# frozen_string_literal: true
+
+module Gzr
+  module Model
+    module Set
+
+      def all_model_sets(fields=nil)
+        req = {}
+        req[:fields] = fields if fields
+        begin
+          return @sdk.all_model_sets(req)
+        rescue LookerSDK::NotFound => e
+          return nil
+        rescue LookerSDK::Error => e
+          say_error "Error querying all_model_sets(#{JSON.pretty_generate(req)})"
+          say_error e
+          raise
+        end
+      end
+
+      def cat_model_set(set_id, fields=nil)
+        req = {}
+        req[:fields] = fields if fields
+        begin
+          return @sdk.model_set(set_id,req)&.to_attrs
+        rescue LookerSDK::NotFound => e
+          return nil
+        rescue LookerSDK::Error => e
+          say_error "Error querying model_set(#{set_id},#{JSON.pretty_generate(req)})"
+          say_error e
+          raise
+        end
+      end
+
+      def trim_model_set(data)
+        trimmed = data.select do |k,v|
+          (keys_to_keep('update_model_set') + [:id,:built_in]).include? k
+        end
+        trimmed
+      end
+
+      def search_model_sets(fields: nil, sorts: nil, id: nil, name: nil, all_access: nil, built_in: nil, filter_or: nil)
+        data = []
+        begin
+          req = {}
+          req[:fields] = fields unless fields.nil?
+          req[:sorts] = sorts unless sorts.nil?
+          req[:id] = id unless id.nil?
+          req[:name] = name unless name.nil?
+          req[:all_access] = all_access unless all_access.nil?
+          req[:built_in] = built_in unless built_in.nil?
+          req[:filter_or] = filter_or unless filter_or.nil?
+          req[:limit] = 64
+          loop do
+            page = @sdk.search_model_sets(req)
+            data+=page
+            break unless page.length == req[:limit]
+            req[:offset] = (req[:offset] || 0) + req[:limit]
+          end
+        rescue LookerSDK::NotFound => e
+          # do nothing
+        rescue LookerSDK::Error => e
+          say_error "Error calling search_model_sets(#{JSON.pretty_generate(req)})"
+          say_error e
+          raise
+        end
+        data
+      end
+
+      def update_model_set(model_set_id, data)
+        begin
+          return @sdk.update_model_set(model_set_id, data)&.to_attrs
+        rescue LookerSDK::Error => e
+          say_error "Error calling update_model_set(#{model_set_id},#{JSON.pretty_generate(data)})"
+          say_error e
+          raise
+        end
+      end
+
+      def create_model_set(data)
+        begin
+          return @sdk.create_model_set(data)&.to_attrs
+        rescue LookerSDK::Error => e
+          say_error "Error calling create_model_set(#{JSON.pretty_generate(data)})"
+          say_error e
+          raise
+        end
+      end
+
+      def delete_model_set(model_set_id)
+        begin
+          return @sdk.delete_model_set(model_set_id)
+        rescue LookerSDK::Error => e
+          say_error "Error calling delete_model_set(#{model_set_id}})"
+          say_error e
+          raise
+        end
+      end
+
+    end
+  end
+end

data/lib/gzr/modules/permission/set.rb

@@ -0,0 +1,123 @@
+# The MIT License (MIT)
+
+# Copyright (c) 2023 Mike DeAngelo Google, Inc.
+
+# Permission is hereby granted, free of charge, to any person obtaining a copy of
+# this software and associated documentation files (the "Software"), to deal in
+# the Software without restriction, including without limitation the rights to
+# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+# the Software, and to permit persons to whom the Software is furnished to do so,
+# subject to the following conditions:
+
+# The above copyright notice and this permission notice shall be included in all
+# copies or substantial portions of the Software.
+
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+# frozen_string_literal: true
+
+module Gzr
+  module Permission
+    module Set
+
+      def all_permission_sets(fields=nil)
+        req = {}
+        req[:fields] = fields if fields
+        begin
+          return @sdk.all_permission_sets(req)
+        rescue LookerSDK::NotFound => e
+          return nil
+        rescue LookerSDK::Error => e
+          say_error "Error querying all_permission_sets(#{JSON.pretty_generate(req)})"
+          say_error e
+          raise
+        end
+      end
+
+      def cat_permission_set(set_id, fields=nil)
+        req = {}
+        req[:fields] = fields if fields
+        begin
+          return @sdk.permission_set(set_id,req)&.to_attrs
+        rescue LookerSDK::NotFound => e
+          return nil
+        rescue LookerSDK::Error => e
+          say_error "Error querying permission_set(#{set_id},#{JSON.pretty_generate(req)})"
+          say_error e
+          raise
+        end
+      end
+
+      def trim_permission_set(data)
+        trimmed = data.select do |k,v|
+          (keys_to_keep('update_permission_set') + [:id,:built_in]).include? k
+        end
+        trimmed
+      end
+
+      def search_permission_sets(fields: nil, sorts: nil, id: nil, name: nil, all_access: nil, built_in: nil, filter_or: nil)
+        data = []
+        begin
+          req = {}
+          req[:fields] = fields unless fields.nil?
+          req[:sorts] = sorts unless sorts.nil?
+          req[:id] = id unless id.nil?
+          req[:name] = name unless name.nil?
+          req[:all_access] = all_access unless all_access.nil?
+          req[:built_in] = built_in unless built_in.nil?
+          req[:filter_or] = filter_or unless filter_or.nil?
+          req[:limit] = 64
+          loop do
+            page = @sdk.search_permission_sets(req)
+            data+=page
+            break unless page.length == req[:limit]
+            req[:offset] = (req[:offset] || 0) + req[:limit]
+          end
+        rescue LookerSDK::NotFound => e
+          # do nothing
+        rescue LookerSDK::Error => e
+          say_error "Error calling search_permission_sets(#{JSON.pretty_generate(req)})"
+          say_error e
+          raise
+        end
+        data
+      end
+
+      def update_permission_set(permission_set_id, data)
+        begin
+          return @sdk.update_permission_set(permission_set_id, data)&.to_attrs
+        rescue LookerSDK::Error => e
+          say_error "Error calling update_permission_set(#{permission_set_id},#{JSON.pretty_generate(data)})"
+          say_error e
+          raise
+        end
+      end
+
+      def create_permission_set(data)
+        begin
+          return @sdk.create_permission_set(data)&.to_attrs
+        rescue LookerSDK::Error => e
+          say_error "Error calling create_permission_set(#{JSON.pretty_generate(data)})"
+          say_error e
+          raise
+        end
+      end
+
+      def delete_permission_set(permission_set_id)
+        begin
+          return @sdk.delete_permission_set(permission_set_id)
+        rescue LookerSDK::Error => e
+          say_error "Error calling delete_permission_set(#{permission_set_id}})"
+          say_error e
+          raise
+        end
+      end
+
+    end
+  end
+end

data/lib/gzr/modules/{permissions.rb → permission.rb}

@@ -22,7 +22,7 @@
 # frozen_string_literal: true
 
 module Gzr
-  module Permissions
+  module Permission
 
     def query_all_permissions()
       data = nil

data/lib/gzr/modules/role.rb

@@ -53,6 +53,18 @@ module Gzr
       end
       data
     end
+    def trim_role(data)
+      trimmed = data.select do |k,v|
+        (keys_to_keep('create_role') + [:id]).include? k
+      end
+      trimmed[:permission_set] = data[:permission_set].select do |k,v|
+        (keys_to_keep('create_permission_set') + [:id,:built_in,:all_access]).include? k
+      end
+      trimmed[:model_set] = data[:model_set].select do |k,v|
+        (keys_to_keep('create_model_set') + [:id,:built_in,:all_access]).include? k
+      end
+      trimmed
+    end
     def delete_role(role_id)
       data = nil
       begin
@@ -124,5 +136,16 @@ module Gzr
       end
       data
     end
+    def create_role(name,pset,mset)
+      req = { name: name, permission_set_id: pset, model_set_id: mset }
+      begin
+        return @sdk.create_role(req)&.to_attrs
+      rescue LookerSDK::Error => e
+        say_error "Unable to call create_role(#{JSON.pretty_generate(req)})"
+        say_error e
+        raise
+      end
+    end
+
   end
 end