Configuring RBAC

Manage Sharing

RBAC is configured by applying roles at the object level by an existing target object owner to a specific user or team. Specific columns related to RBAC that are outlined in this guide can be added to the portal pages by selecting table columns with the ellipsis option.

A user must be a member or owner of a team to grant objects roles to that specific team.

A User's privilege for a given object is the most permissive access provided by the User, their Team(s) and their Organization.

Organization

Existing Organization Owner(s) can provide roles to users or teams of the organization by opening the Manage Sharing menu in the portal organization page.

The Manage Sharing menu provides a dropdown selection to assign a role for each organization user or team.

Manage Sharing: Users

Manage Sharing: Teams

****

The Manage Sharing menu also provides organization owners the ability to view and manage multiple user's **or teams roles across all target objects within the organization in a single administrative window.

Select the hamburger in the All Permissions column for the targeted user or team.

All Permissions: Users

All Permissions: Teams

The All Permissions menu allows granular control of roles across all objects in the organization for a specified user or team. The selected user is displayed and in this example, you can see we have assigned various roles to different Environments and blueprints that are present in the organization.

Blueprints

Blueprint and organization owners can set roles on blueprint objects for other users or teams in the organization from the portal blueprint list page by clicking on the hamburgerin the RBAC Manage Sharing column.

Blueprint collaborators and observers do not have permission to manage roles on blueprint objects and the option is grayed out.

The Manage Sharing menu provides a dropdown selection to assign a blueprint role for each organization user or team.

Blueprint roles can also be set directly from the blueprint editor by opening the settings window and clicking Manage Sharing which opens the Manage Sharing menu for that blueprint.

Environment

Environment and organization owners can set roles on Environment objects for other users or teams in the organization from the portal Environment list page by clicking on the hamburgerin the RBAC Manage Sharing column.

Environment collaborators and observers do not have permissions to manage roles on Environment objects and the option is grayed out.

The Manage Sharing menu provides a dropdown selection to assign an Environment role for each organization user or team.

Environment roles can also be set directly on the Environment page by opening the settings window and clicking Manage Sharing which opens the Manage Sharing menu for that Environment.