Users and Roles

Mon, 01 Jan 0001 00:00:00 +0000

An account can have multiple users, and each user has a role that defines what they can see and do. When a new account is created, the first user has an admin role which allows that user to create and manage additional users for the account.

User roles and description

The following user roles are available:

Role	Description
admin	admin users have full access to the account and can manage other users and their access.
platform	platform users can access all resources including Compliance, Inventory Report, and Policies, but cannot manage users.
security	security users can view the Policy Report and manage Policy Exceptions. They have the privilege to review Policy Exception requests and have access to Compliance, Clusters, and Repositories, but cannot manage users.
devops	devops users have the least privileged access. A devops user can view the Policy Report and create Policy Exceptions. They do not have access to Compliance, Inventory Report, and cannot manage users.

Configuring user roles and permissions

Identity & Access Management (IAM) lets you add users, set user privileges, group users in teams, and configure access methods such as Security Assertion Markup Language (SAML), OpenID Connect (OIDC), and Multi-Factor Authentication (MFA).

Teams

Mon, 01 Jan 0001 00:00:00 +0000

In Nirmata, users can be organized into teams. A team is a logical entity that allows you to manage permissions for a group of users who require shared access to organizational resources. Each team can include multiple users, each with specific roles and permissions.

Adding a Team

To create a new team:

Navigate to Identity & Access > Teams.
Click the Add Team button. The Add a New Team page will appear.
In the Name field, enter the team’s name.
In the Description field, provide a brief description of the team.
To add users:
- In the Users section, click the Add Users button.
- In the search field, enter the user’s name and select the checkbox next to it.
To assign namespace access:
- Click the Add Access Control button.
- In the search field, enter the desired namespaces and select the corresponding checkboxes.
Click Create to finalize the team.

Editing or Deleting a Team