- 01 Nov 2024
-
DarkLight
-
PDF
Groups
- Updated on 01 Nov 2024
-
DarkLight
-
PDF
Permissions are granted to Itential Cloud user accounts and Service Accounts via membership in groups. A group contains a collection of roles in which each role corresponds to a permission. A user account or Service Account that is associated with a group inherits any permissions granted by the roles assigned to that group.
To view and manage groups, select Administration → Groups from portal sidebar.
Default Groups
Every Itential Cloud account comes with the built in admins and users groups.
Group | Description |
---|---|
admins | By default, this group is configured to have all possible roles assigned to it. You must be careful about which users you assign to this group because they will have full permissions. |
users | By default, this groups is configured with read-only roles assigned to it. |
While Itential Cloud provides these built in groups, you are free to modify or delete them to suit your organizational security needs.
Creating a New Group
To create a new group from the Groups page:
- Click the + New Group in the Groups page.
- Enter a name for the group, and an optional description.
- Click the Create button to create the group, or Cancel to back out.
Newly created groups have no users accounts, service accounts assigned to them, and have no roles assigned to them.
Editing a Group
To edit an existing group from the Groups page:
- Locate the desired group in the Groups page.
- Click the row of the desired group, or select Edit from the More (⋮) menu.
This will take you to the details page for that group. The specific actions that can be taken from the Group Settings window are described below.
Assigning Users to a Group
To assign members to a group from the Group Settings window, from the Members tab:
- Select the checkbox of the desired user accounts
- Click the Save button to save the changes, or click the Groups breadcrumb to back out.
Associating Service Accounts with groups is done through Service Accounts configuration.
Assigning Roles to a Group
To assign roles to a group from the Group Settings window, select the Roles tab. By default, all roles that are available across the different applications and environments available to your Itential Cloud account are displayed. If you want to show only those roles for a specific application, select the application name from the drop-down.
To select which roles are assigned to the group:
- Select the checkbox of the desired roles.
- Click the Save button to save the changes, or click the Groups breadcrumb to back out.
Deleting a Group
To delete a group from the Groups page:
- Locate the desired group in the Groups page.
- Click the row of the desired group, or select Delete Group from the More (⋮) menu.
⚠ Deleting a group is permanent and you cannot undo the operation.