| Table of Contents |
|---|
...
For information about the Abiquo concepts of enterprises and users, see Tenants and users in the Abiquo Walkthrough.
| Tip |
|---|
API Documentation For the Abiquo API documentation of this feature, see Abiquo API Resources and the page for this resource RolesResource. |
...
To manage roles, go to Users → Roles. By default, you will see the Global roles that are available to all enterprises and the platform will display them with "(Global)" after the name. To display the enterprise roles that belong to a specific enterprise, select the enterprise.
...
Create or modify a role
Abiquo provides a set of default roles and you can clone and modify them to create new roles. See Default roles. See Privileges for a list of the privileges for each role.
...
Field | Description |
|---|---|
Role name | The name of the role. Local roles in different enterprises can have the same names |
Enterprise | The enterprise that a local role belongs to |
Make this role global | To create a global role that can be used in all enterprises, mark the Make this role global checkbox. |
Allowed CIDRs | Optional: to create a default list of network addresses from which users with this role can access the platform, enter Allowed CIDRs. You can also set allowed CIDRs for a scope. The user will inherit the role and scope CIDRs. Any allowed CIDRs set directly for the user will have priority over these inherited allowed CIDRs. |
External Roles | The corresponding external roles, e.g. LDAP group, for the user. Required in external authentication modes (openid, ldap). A user's external roles must map to a single role (local or global). See LDAP and Active Directory Integration and Abiquo OpenID Connect Integration. You can also set external scopes.
|
After you create or clone a role, select the role name in the list and edit the privileges as required, then click Save.
Modify the privileges of a role
To modify the privileges of a user role
...
:
| Panel |
|---|
Privilege: Manage privileges |
Go to Users → Roles
For a local role, select the enterprise that the role belongs to
Select the role from the Roles list
In the Privileges pane, select or deselect the privileges
To add or remove groups of privileges, click the All privileges checkbox beside the group name
You cannot undo but you can discard the changes
Save the changes by clicking Save
The platform will discard your changes if you do an action outside of the Privileges pane, for example, clicking on a another role name
| Note |
|---|
Troubleshooting and tipsRoles
Privileges
|
Privileges table
See Privileges
...