view
only access has the least privilege. This user can only view combination of environments, applications and helm charts on which access has been granted to the user. This user cannot view sensitive data like secrets used in applications or charts.view
privilege mentioned in above, user with build and deploy
permission can build and deploy the image of permitted applications and helm charts to permitted environments.admin
access can create, edit, delete and view permitted applications in permitted projects.manager
access can do everything that an admin
type user can do, in addition they can also give and revoke access of users for the applications and environments of which they are manager
.super admin
privilege has unrestricted access to all Devtron resources. Super admin can create, modify, delete and view any Devtron resource without any restriction; its like Superman without the weakness of Kryptonite. Super Admin can also add and delete user access across any Devtron resource, add delete git repository credentials, container registry credentials, cluster and environment.Select Global Configurations
-> Select User Access
Add User
, to add one or multiple users.Email address
box, you have to provide the mail ID of the user to whom you want to give access to your applications.IMP
Please note that Email address should be same as that in the email
field in the JWT token returned by OIDC provider.Assign super admin permissions
, the user will get full access to your system and the rest of the options will disappear. Please check above to see permission levels. Only users with super admin permissions can assign super admin permissions to a user.Save
and your user will be saved with super admin permissions.Devtron Apps
section. This section has 4 options to manage the permissions of your users.Add row
.Environment
section, you can select one or more than one or all environments at a time. Click on the environment section, you will see a drop-down of your environments and select any environment on which you want to give permission to the user.IMP
If all environments
option is selected then user gets access to all current environments and any new environment which gets associated with this application later.Applications
from the drop-down corresponding to your selected Environments. In this section, you can also give permissions to one or more than one or to all applications at a time.IMP
If all applications
option is selected then user gets access to all current applications and any new application which gets associated with this project later.Role
, you actually choose which type of permissions you want to give to the users.Save
.Devtron Apps
section. This section has 4 options to manage the permissions of your users.Add row
.Environment
section, you can select one or more than one or all environments at a time. Click on the environment section, you will see a drop-down of your environments and select any environment on which you want to give permission to the user.IMP
If all environments
option is selected then user gets access to all current environments and any new environment which gets associated with this application later.Applications
from the drop-down corresponding to your selected Environments. In this section, you can also give permissions to one or more than one or to all applications at a time.IMP
If all applications
option is selected then user gets access to all current applications and any new application which gets associated with this project later.Role
, you actually choose which type of permissions you want to give to the users.create
or edit
, not both.Create
, if you want the users to create, view, edit, or delete the chart groups.edit
the chart groups, check Specific chart group
from Edit
drop-down. In the following field, select the chart group for which you want to grant the user edit permission.Edit
drop-down, if you want to allow
or deny
users to edit the chart groups.Deny
option from the drop-down, if you want to restrict the users to edit the chart groups.Specific Charts
option from the drop-down and then select the chart groups for which you want to allow users to edit, from the other drop-down menu.Save
, once you have configured all the required permissions for the users.downward arrow
.Save
.Delete
.Group permissions
section inside Add users
.Groups
and click on Add Group
, to create a new group.Group Name
and Description
.Save
.downward arrow.
Save
.Delete
.