84fdd3c750
* draft rbac docs * tweaks * add a permissions topic * tweaks * more changes * draft permissions topic * more content on roles * links * typo * more conceptual info * Optimised images with calibre/image-actions * more content on roles * add more x-ref links * fix links * more content * links * typos * polishing * Update website/docs/user-group-role/access-control/permissions.md Co-authored-by: Jens L. <jens@goauthentik.io> Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com> * separwate conceptual vs procedural in permissions * finished groups procedurals * new page * added link * Update website/docs/user-group-role/access-control/permissions.md Co-authored-by: Jens L. <jens@goauthentik.io> Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com> * polish * edits from PR review * restructured view section to remove repetition * rest of edits from PR review * polished flows and stages * polish * typo --------- Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com> Co-authored-by: Tana Berry <tana@goauthentik.io> Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com> Co-authored-by: Jens L. <jens@goauthentik.io>
2.3 KiB
| title | description |
|---|---|
| Manage roles | Learn how to work with roles and permissions in authentik. |
Roles are a collection of permissions, which can then be assigned, en masse, to a group. Using roles is a way to quickly grant permissions; by adding a user to the group with the appropriate assigned roles, any user in that group then inherits all of those permissions that are assigned to the role.
:::info In authentik, we assign roles to groups, not to individual users. :::
Create a role
To create a new role, follow these steps:
- In the Admin interface, navigate to Directory > Roles.
- Click Create, enter the name of the role, and then click Create in the modal.
- Next, assign permissions to the role.
Modify a role
To modify a role, follow these steps:
-
To edit the name of the role, click the Edit icon beside the role's name.
-
To modify the permissions that are assigned to the role click on the role's name to go to the role's detail page. There you can add, modify, or remove permissions. For more information, refer to "Assign or remove permissions for a specific role".
Delete a role
To delete a role, follow these steps:
- In the Admin interface, navigate to Directory > Roles.
- Select the checkbox beside the name of the role that you want to delete.
- Click Delete.
Assign a role to a group
In authentik, roles are assigned to groups, not to individual users.
- To assign the role to a group, navigate to Directory -> Groups.
- Click the name of the group to which you want to add a role.
- On the group's detail page, on the Overview tab, click Edit in the Group Info area.
- On the Update Group modal, in the Roles field, scroll through the list of existent roles, and click to select the one you want to add to the group. (You can select multiple roles at once by holding the Control and Command keys while selecting the roles.)
- Click Update to add the role(s) and close the modal.
:::info To remove a role from a group, hold the Command key and click the name of the role that you want to remove from the group. This desepcts the role. Then click Update. :::