Permission Groups
Using the Permission groups
, you can assign a user to a particular group and a user inherits all the permissions granted to the group.
The advantage of the Permission groups
is to define a set of privileges like create, edit, or delete for the given set of resources that can be shared among the users within the group.
The User permissions section for Specific permissions
contains a drop-down list of all existing groups for which a user has an access. This is an optional field and more than one groups can be selected for a user.
Add Group
Go to Global Configurations → Authorization → Permissions groups → Add group.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fglobal-configurations%2Fpermission-group%2Fpermission-group-1.png&width=768&dpr=4&quality=100&sign=50dbb3b0&sv=1)
Enter the Group Name
and Description
.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fglobal-configurations%2Fpermission-group%2Fpermission-group-2.png&width=768&dpr=4&quality=100&sign=9e2a3e47&sv=1)
You can either grant super-admin permission to a user group or specific permissions to manage access for:
Devtron Apps Permissions
In Devtron Apps
option, you can provide access to a group to manage permission for custom apps created using Devtron.
The Devtron Apps
option will be available only if you install CI/CD integration.
Provide the information in the following fields:
Dropdown | Description |
---|---|
Project | Select a project from the drop-down list to which you want to give permission to the group. You can select only one project at a time.
Note: If you want to select more than one project, then click |
Environment | Select the specific environment or all environments from the drop-down list.
Note: If you select |
Application | Select the specific applications or all applications from the drop-down list corresponding to your selected Environments.
Note: If you select |
Role | Select one of the roles to which you want to give permission to the user:
|
You can add multiple rows for Devtron Apps
permission.
Once you have finished assigning the appropriate permissions for the groups, Click Save.
Helm Apps Permissions
In Helm Apps
option, you can provide access to a group to manage permission for Helm apps deployed from Devtron or outside Devtron.
Provide the information in the following fields:
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fglobal-configurations%2Fpermission-group%2Fpermission-groups-helm-apps-v2.jpg&width=768&dpr=4&quality=100&sign=987df888&sv=1)
Dropdown | Description |
---|---|
Project | Select a project from the drop-down list to which you want to give permission to the group. You can select only one project at a time.
Note: If you want to select more than one project, then click |
Environment or cluster/namespace | Select the specific environment or |
Application | Select the specific application or all applications from the drop-down list corresponding to your selected Environments.
Note: If |
Role |
You can add multiple rows for Devtron app permission.
Once you have finished assigning the appropriate permissions for the groups, Click Save.
Jobs
In Jobs
option, you can provide access to a group to manage permission for jobs created using Devtron.
Provide the information in the following fields:
Dropdown | Description |
---|---|
Project | Select a project from the drop-down list to which you want to give permission to the group. You can select only one project at a time.
Note: If you want to select more than one project, then click |
Job Name | Select the specific job name or all jobs from the drop-down list.
Note: If you select |
Workflow | Select the specific workflow or all workflows from the drop-down list.
Note: If you select |
Environment | Select the specific environment or all environments from the drop-down list.
Note: If you select |
Role |
You can add multiple rows for Jobs
permission.
Once you have finished assigning the appropriate permissions for the groups, Click Save.
Kubernetes Resources Permissions
In Kubernetes Resources
option, you can provide permission to view, inspect, manage, and delete resources in your clusters from Kubernetes Resource Browser page in Devtron. You can also create resources from the Kubernetes Resource Browser
page.
Only super admin users will be able to see Kubernetes Resources
tab and provide permission to other users to access Resource Browser
.
To provide Kubernetes resource permission, click Add permission
.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fglobal-configurations%2Fpermission-group%2Fkubernetes-resources-permission-group-v2.jpg&width=768&dpr=4&quality=100&sign=8bcefe9e&sv=1)
On the Kubernetes resource permission
, provide the information in the following fields:
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fglobal-configurations%2Fuser-access%2Fuser-permission%2Fkubernetes-resources-permission-page-v2.jpg&width=768&dpr=4&quality=100&sign=92792355&sv=1)
Dropdown | Description |
---|---|
Cluster | Select a cluster from the drop-down list to which you want to give permission to the user. You can select only one cluster at a time.
Note: To add another cluster, then click |
Namespace | Select the namespace from the drop-down list. |
API Group | Select the specific API group or |
Kind | Select the kind or |
Resource name | Select the resource name or |
Role |
You can add multiple rows for Kubernetes resource permission.
Once you have finished assigning the appropriate permissions for the groups, Click Save.
Chart Group Permissions
In Chart group permission
option, you can manage the access of groups for Chart Groups in your project.
The Chart group permission
option will be available only if you install CI/CD integration.
You can only give users the ability to create
or edit
, not both.
Action | Permissions |
---|---|
View | Enable |
Create | Enable |
Edit |
|
Click Save once you have configured all the required permissions for the groups.
Edit Permissions Groups
You can edit the permission groups by clicking the downward arrow.
Edit the permission group.
Once you are done editing the permission group, click Save.
If you want to delete the groups with particular permission group, click Delete.
Last updated