Administrator¶
Before you start¶
Goal
- Create an administrator group for a specific namespace.
Prerequisites
- A configured Hub server.
- A namespace for which the administrator will be created.
- Administration privileges for Altair SLC Hub.
A user or group can be created that will provide administrative privileges to the Deployment Service, Enterprise and Invocation sections of the specified namespace. This can be useful for example if there are designated administrators for different business units. This will provide full access to the following elements within the given namespace of Altair SLC Hub:
- Artefacts
- Artefact repositories
- Deployments, including API endpoints
- Asynchronous jobs
- Pipelines
- Pipeline runs
- Authentication domains
- Library definitions
- Published libraries
Not all information is namespaced
While most information is namespaced and can therefore only be accessed from within a namespace, some elements, namely artefacts and artefact repositories are global and do not require namespace permissions to access.
Create the Group¶
It is recommended to create a group and assign users to this group rather than assigning roles directly to a user.
In the Altair SLC Hub portal, launch Hub Administration and click Groups. Click New to create the new group and give it a suitable name, for example FinanceNamespaceAdmins.
Add the following role bindings. To do this, click New under the role bindings section, set the namespace to bind to, and click Add for the listed roles:
Role | Namespace |
---|---|
ArtifactAdministrator | * |
ExecutionProfileUser | * |
InvocationPortalUser | * |
PortalCredentialManager | * |
PortalDataAccessAdministrator | * |
PortalDeploymentServicesAdministrator | * |
User | * |
CredentialManager | Finance |
DataAccessAdministrator | Finance |
DeploymentServicesAdministrator | Finance |
NamespaceUser | Finance |
The key element is the binding to NamespaceUser
for the relevant namespace and binding most of the roles to only the required namespace.
Any portal-specific roles need to be bound with namespace *
.
Add Users¶
Now add the users that are intended to be administrators for this namespace to the new group. To do this click Add under the Group members section of the group editing page, search for the required users and click Add for each member.
Permission changes require re-authentication
To activate the permission changes each added user needs to log out and log back in.
Verify¶
Verify new users permissions
Check that when the users who have been added to the new namespace administrator group can access the new namespace and can perform all actions relating to the listed elements in Altair SLC Hub.