Roles and Users
We divide the RHACS users into 2 groups according to the interaction method:
- Human users and
- Machines users
1. Human Users
Human user interacts with RHACS using UI. For Human users, we are using SSO authentication method. So once we grant proper roles to the users. You can refer the role mapping rules mentioned above as the list format. At the first login, account information is registered in the
rh-sso which is coming from the IdP. If that information is enough, then registration is performed automatically. If some information is missing, user is requested to update account information and user has to fill out all information.
SSO (OAuth) Roles
For human users which login via SSO we have following roles available.
|Analyst (default)||view on everything in cluster , this is the default role|
On first login you automatically get
2. Machine Users
Machine user interacts with
roxctl using API or CLI and we are using
rox_api_token authentication for machines users.
rox_api_token is created automatically in build namespaces to run RHACS steps in Tekton pipelines.