Role-Based Access Control (RBAC)

Overview

Every new account comes with a set of pre-defined roles. As an Account Admin, you can further configure Role-Based Access Control (RBAC) by defining custom roles within the tenant and assigning them to tenant members. You can control the access policies for the roles that you create. Also, you can map more than one role to a specific user. This provides more flexibility and control in managing access control for your tenant members.

When a new tenant is created, a few roles are added by default. Here is the list of default role types in a tenant:

Navigation

Click on the settings icon in the top left of the CoreStack portal and select Roles from the menu. The Roles & Permissions screen will be displayed, which allows you to create and manage roles.

Adding a New Role

Using Tenant_admin you can create and inherit permissions from Account_admin.
As an Account/Tenant admin you have an option to create a user group and assign relevant role to the group. Admin can add/remove users from the group.

The following steps need to be performed to add a new role.

1. Click on the "Add New" button in the Roles & Permissions screen.
2. Provide the following details to create the role:

3. Click the Apply button to create the new role.

A new role will be created and listed in the table.

Configuring Access Policies for Custom Roles

While creating the roles, you can configure the access permissions for different modules such as Templates, Blueprints, Environments, etc.

Users have the privilege to provide full access or customize the access per role.

After completing the fields and selecting the access permissions, users can click the Apply button available in the top right-hand side to save the settings.

📘

Note:

• Click on 'Provide Full Access' or 'Remove All' to enable or disable all the listed access permissions, respectively.
• A new user or an existing user assigned with a custom role in CoreStack will have to wait for few hours before they can view up-to-date cost usage reports due to data processing time.

Managing Existing Roles

You can manage the roles created by using the below options.

1. Click on the link in the "Role Name" column of a role from the Roles & Permissions table to view and update the details configured for the role.
2. Click on the link in the "No of Users" column of a role from the Roles & Permissions table to view the list of users currently assigned this role.
3. Click on the delete icon in the "Action" column of a custom role in the Roles & Permissions table to delete the role.
4. Select the hamburger button (three horizontal bars) and enable or disable the columns to show or hide them for viewing in the table.

Searching Roles

Use the Search bar along the top of the Roles & Permissions table to find specific roles from the list. The search option is not case sensitive.

Change User Properties

As an account/tenant admin, you can change user properties and assign users different roles.

1. Click Settings, then Users.

2. Enter the name of the user in the search bar and hit enter.

3. To change User Information, click the edit button. You can change First Name, Last Name, and Email Address.

4. Click Apply.

5. Click Tenant Roles to change tenant role.

6. Click the edit button and select the tenant you want to apply for the respective user.

7. Click Apply.