From 224bc8168b561a031f5beea57d088946cc13b68f Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Thu, 7 Mar 2024 10:28:26 -0500 Subject: [PATCH] #743 Role template management title updated (#1160) * 743 Role Templates management title updated In v2.7.7, the title of the Roles page under Users & Authentication, was updated to instead read Role Templates * updated for v2.7 pages * syncing v2.7 verbage * more syncing across versions --- .../creator-permissions.md | 4 ++-- .../cluster-and-project-roles.md | 6 +++--- .../custom-roles.md | 6 +++--- .../global-permissions.md | 14 +++++++------- .../locked-roles.md | 2 +- .../creator-permissions.md | 2 +- .../creator-permissions.md | 5 +++-- .../cluster-and-project-roles.md | 9 ++++++--- .../custom-roles.md | 13 ++++++++----- .../global-permissions.md | 19 ++++++++++++------- .../locked-roles.md | 3 ++- .../creator-permissions.md | 4 ++-- .../cluster-and-project-roles.md | 6 +++--- .../custom-roles.md | 6 +++--- .../global-permissions.md | 14 +++++++------- .../locked-roles.md | 2 +- 16 files changed, 64 insertions(+), 51 deletions(-) diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md index eff8b84ee92..b4a0f290620 100644 --- a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md @@ -40,8 +40,8 @@ An administrator can individually grant the role **Create RKE Templates** to any Alternatively, the administrator can give all new users the default permission to create RKE templates by following the following steps. This will not affect the permissions of existing users. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. Go to the role named **Create new RKE Cluster Templates and click **⋮ > Edit Config**. +1. In the left navigation bar, click **Role Templates**. +1. Select **Create new RKE Cluster Templates** and click **⋮ > Edit Config**. 1. Select the option **Yes: Default role for new users**. 1. Click **Save**. 1. If you would like new users to also be able to create RKE template revisions, enable that role as default as well. diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md index 74a2f048391..512a24f4b3d 100644 --- a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md @@ -11,7 +11,7 @@ Cluster and project roles define user authorization inside a cluster or project. To manage these roles, 1. Click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles** and go to the **Cluster** or **Project/Namespaces** tab. +1. In the left navigation bar, click **Role Templates** and go to the **Cluster** or **Project/Namespaces** tab. ### Membership and Role Assignment @@ -73,7 +73,7 @@ The following table lists the permissions available for the `Manage Nodes` role For details on how each cluster role can access Kubernetes resources, you can look them up in the Rancher UI: 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Click the **Cluster** tab. 1. Click the name of an individual role. The table shows all of the operations and resources that are permitted by the role. @@ -220,7 +220,7 @@ There are two methods for changing default cluster/project roles: You can change the cluster or project role(s) that are automatically assigned to the creating user. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Click the **Cluster** or **Project/Namespaces** tab. 1. Find the custom or individual role that you want to use as default. Then edit the role by selecting **⋮ > Edit Config**. 1. In the **Cluster Creator Default** or **Project Creator Default** section, enable the role as the default. diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md index 5e9c6c7a96d..7f44a211cf4 100644 --- a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md @@ -31,7 +31,7 @@ While Rancher comes out-of-the-box with a set of default user roles, you can als The steps to add custom roles differ depending on the version of Rancher. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Select a tab to determine the scope of the role you're adding. The tabs are: - **Global:** The role is valid for allowing members to manage global scoped resources. @@ -65,7 +65,7 @@ The custom role can then be assigned to a user or group so that the role takes e To create a custom role based on an existing role, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Click the **Cluster** or **Project/Namespaces** tab. Click **Create Cluster Role** or **Create Project/Namespaces Role** depending on the scope. Note: Only cluster roles and project/namespace roles can inherit from another role. 1. Enter a name for the role. 1. In the **Inherit From** tab, select the role(s) that the custom role will inherit permissions from. @@ -86,7 +86,7 @@ Custom roles can be deleted, but built-in roles cannot be deleted. To delete a custom role, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 2. Go to the custom global role that should be deleted and click **⋮ (…) > Delete**. 3. Click **Delete**. diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md index a516c10fe5b..f08099bfba4 100644 --- a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md @@ -31,8 +31,8 @@ When you create a new local user, you assign them a global permission as you com To see the default permissions for new users, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. The **Roles** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **Global** tab, in the **New User Default** column, the permissions given to new users by default are indicated with a checkmark. +1. In the left navigation bar, click **Role Templates**. +1. The **Role Templates** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **Global** tab, in the **New User Default** column, the permissions given to new users by default are indicated with a checkmark. You can [change the default global permissions to meet your needs.](#configuring-default-global-permissions) @@ -43,8 +43,8 @@ When a user logs into Rancher using an external authentication provider for the To see the default permissions for new users, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. The **Roles** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **New User Default** column on each page, the permissions given to new users by default are indicated with a checkmark. +1. In the left navigation bar, click **Role Templates**. +1. The **Role Templates** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **New User Default** column on each page, the permissions given to new users by default are indicated with a checkmark. You can [change the default permissions to meet your needs.](#configuring-default-global-permissions) @@ -92,7 +92,7 @@ The following table lists each built-in global permission and whether it is incl For details on which Kubernetes resources correspond to each global permission, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. If you click the name of an individual role, a table shows all of the operations and resources that are permitted by the role. :::note Notes: @@ -221,7 +221,7 @@ Default roles are only assigned to users added from an external authentication p To change the default global permissions that are assigned to external users upon their first log in, follow these steps: 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. On the **Roles** page, make sure the **Global** tab is selected. +1. In the left navigation bar, click **Role Templates**. On the **Role Templates** page, make sure the **Global** tab is selected. 1. Find the permissions set that you want to add or remove as a default. Then edit the permission by selecting **⋮ > Edit Config**. 1. If you want to add the permission as a default, Select **Yes: Default role for new users** and then click **Save**. If you want to remove a default permission, edit the permission and select **No**. @@ -234,7 +234,7 @@ To configure permission for a user, 1. In the upper left corner, click **☰ > Users & Authentication**. 1. In the left navigation bar, click **Users**. 1. Go to the user whose access level you want to change and click **⋮ > Edit Config**. -1. In the **Global Permissions** and **Built-in** sections, check the boxes for each permission you want the user to have. If you have created roles from the **Roles** page, they will appear in the **Custom** section and you can choose from them as well. +1. In the **Global Permissions** and **Built-in** sections, check the boxes for each permission you want the user to have. If you have created roles from the **Role Templates** page, they will appear in the **Custom** section and you can choose from them as well. 1. Click **Save**. **Result:** The user's global permissions have been updated. diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md index 4c4aec0be54..9cf6df0225f 100644 --- a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md @@ -36,7 +36,7 @@ You can lock roles in two contexts: Cluster roles and project/namespace roles can be locked, but global roles cannot. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Go to the **Cluster** tab or the **Project/Namespaces** tab. 1. From the role that you want to lock (or unlock), select **⋮ > Edit Config**. 1. From the **Locked** option, choose the **Yes** or **No** radio button. Then click **Save**. diff --git a/versioned_docs/version-2.6/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md b/versioned_docs/version-2.6/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md index eff8b84ee92..416e26f40f8 100644 --- a/versioned_docs/version-2.6/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md +++ b/versioned_docs/version-2.6/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md @@ -41,7 +41,7 @@ Alternatively, the administrator can give all new users the default permission t 1. In the upper left corner, click **☰ > Users & Authentication**. 1. In the left navigation bar, click **Roles**. -1. Go to the role named **Create new RKE Cluster Templates and click **⋮ > Edit Config**. +1. Select **Create new RKE Cluster Templates** and click **⋮ > Edit Config**. 1. Select the option **Yes: Default role for new users**. 1. Click **Save**. 1. If you would like new users to also be able to create RKE template revisions, enable that role as default as well. diff --git a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md index eff8b84ee92..5fd693a7c06 100644 --- a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md +++ b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md @@ -40,8 +40,9 @@ An administrator can individually grant the role **Create RKE Templates** to any Alternatively, the administrator can give all new users the default permission to create RKE templates by following the following steps. This will not affect the permissions of existing users. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. Go to the role named **Create new RKE Cluster Templates and click **⋮ > Edit Config**. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. +1. Select **Create new RKE Cluster Templates** and click **⋮ > Edit Config**. 1. Select the option **Yes: Default role for new users**. 1. Click **Save**. 1. If you would like new users to also be able to create RKE template revisions, enable that role as default as well. diff --git a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md index 74a2f048391..b3a579ce0ad 100644 --- a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md +++ b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md @@ -11,7 +11,8 @@ Cluster and project roles define user authorization inside a cluster or project. To manage these roles, 1. Click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles** and go to the **Cluster** or **Project/Namespaces** tab. +1. In the left navigation bar, click **Role Templates** and go to the **Cluster** or **Project/Namespaces** tab. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. ### Membership and Role Assignment @@ -73,7 +74,8 @@ The following table lists the permissions available for the `Manage Nodes` role For details on how each cluster role can access Kubernetes resources, you can look them up in the Rancher UI: 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. 1. Click the **Cluster** tab. 1. Click the name of an individual role. The table shows all of the operations and resources that are permitted by the role. @@ -220,7 +222,8 @@ There are two methods for changing default cluster/project roles: You can change the cluster or project role(s) that are automatically assigned to the creating user. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. 1. Click the **Cluster** or **Project/Namespaces** tab. 1. Find the custom or individual role that you want to use as default. Then edit the role by selecting **⋮ > Edit Config**. 1. In the **Cluster Creator Default** or **Project Creator Default** section, enable the role as the default. diff --git a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md index 5e9c6c7a96d..6597398f17f 100644 --- a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md +++ b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md @@ -31,7 +31,8 @@ While Rancher comes out-of-the-box with a set of default user roles, you can als The steps to add custom roles differ depending on the version of Rancher. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. 1. Select a tab to determine the scope of the role you're adding. The tabs are: - **Global:** The role is valid for allowing members to manage global scoped resources. @@ -65,7 +66,8 @@ The custom role can then be assigned to a user or group so that the role takes e To create a custom role based on an existing role, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. 1. Click the **Cluster** or **Project/Namespaces** tab. Click **Create Cluster Role** or **Create Project/Namespaces Role** depending on the scope. Note: Only cluster roles and project/namespace roles can inherit from another role. 1. Enter a name for the role. 1. In the **Inherit From** tab, select the role(s) that the custom role will inherit permissions from. @@ -86,9 +88,10 @@ Custom roles can be deleted, but built-in roles cannot be deleted. To delete a custom role, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -2. Go to the custom global role that should be deleted and click **⋮ (…) > Delete**. -3. Click **Delete**. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. +1. Go to the custom global role that should be deleted and click **⋮ (…) > Delete**. +1. Click **Delete**. ## Assigning a Custom Role to a Group diff --git a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md index dfae1c35f46..89cdfe4dbcb 100644 --- a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md +++ b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md @@ -102,8 +102,9 @@ When you create a new local user, you assign them a global permission as you com To see the default permissions for new users, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. The **Roles** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **Global** tab, in the **New User Default** column, the permissions given to new users by default are indicated with a checkmark. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. +1. The **Role Templates** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **Global** tab, in the **New User Default** column, the permissions given to new users by default are indicated with a checkmark. You can [change the default global permissions to meet your needs.](#configuring-default-global-permissions) @@ -114,8 +115,9 @@ When a user logs into Rancher using an external authentication provider for the To see the default permissions for new users, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. The **Roles** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **New User Default** column on each page, the permissions given to new users by default are indicated with a checkmark. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. +1. The **Role Templates** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **New User Default** column on each page, the permissions given to new users by default are indicated with a checkmark. You can [change the default permissions to meet your needs.](#configuring-default-global-permissions) @@ -161,7 +163,8 @@ The following table lists each custom global permission available and whether it For details on which Kubernetes resources correspond to each global permission, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. 1. If you click the name of an individual role, a table shows all of the operations and resources that are permitted by the role. :::note Notes: @@ -184,7 +187,8 @@ Default roles are only assigned to users added from an external authentication p To change the default global permissions that are assigned to external users upon their first log in, follow these steps: 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. On the **Roles** page, make sure the **Global** tab is selected. +1. In the left navigation bar, click **Roles**. On the **Role Templates** page, make sure the **Global** tab is selected. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. 1. Find the permissions set that you want to add or remove as a default. Then edit the permission by selecting **⋮ > Edit Config**. 1. If you want to add the permission as a default, Select **Yes: Default role for new users** and then click **Save**. If you want to remove a default permission, edit the permission and select **No**. @@ -197,7 +201,8 @@ To configure permission for a user, 1. In the upper left corner, click **☰ > Users & Authentication**. 1. In the left navigation bar, click **Users**. 1. Go to the user whose access level you want to change and click **⋮ > Edit Config**. -1. In the **Global Permissions** and **Built-in** sections, check the boxes for each permission you want the user to have. If you have created roles from the **Roles** page, they will appear in the **Custom** section and you can choose from them as well. +1. In the **Global Permissions** and **Built-in** sections, check the boxes for each permission you want the user to have. If you have created roles from the **Role Templates** page, they will appear in the **Custom** section and you can choose from them as well. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. 1. Click **Save**. **Result:** The user's global permissions have been updated. diff --git a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md index 4c4aec0be54..e30702355f0 100644 --- a/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md +++ b/versioned_docs/version-2.7/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md @@ -36,7 +36,8 @@ You can lock roles in two contexts: Cluster roles and project/namespace roles can be locked, but global roles cannot. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. + * In Rancher v2.7.6 and earlier, the **Role Templates** page is labeled **Roles**. 1. Go to the **Cluster** tab or the **Project/Namespaces** tab. 1. From the role that you want to lock (or unlock), select **⋮ > Edit Config**. 1. From the **Locked** option, choose the **Yes** or **No** radio button. Then click **Save**. diff --git a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md index eff8b84ee92..b4a0f290620 100644 --- a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md +++ b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/about-rke1-templates/creator-permissions.md @@ -40,8 +40,8 @@ An administrator can individually grant the role **Create RKE Templates** to any Alternatively, the administrator can give all new users the default permission to create RKE templates by following the following steps. This will not affect the permissions of existing users. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. Go to the role named **Create new RKE Cluster Templates and click **⋮ > Edit Config**. +1. In the left navigation bar, click **Role Templates**. +1. Select **Create new RKE Cluster Templates** and click **⋮ > Edit Config**. 1. Select the option **Yes: Default role for new users**. 1. Click **Save**. 1. If you would like new users to also be able to create RKE template revisions, enable that role as default as well. diff --git a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md index 74a2f048391..512a24f4b3d 100644 --- a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md +++ b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles.md @@ -11,7 +11,7 @@ Cluster and project roles define user authorization inside a cluster or project. To manage these roles, 1. Click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles** and go to the **Cluster** or **Project/Namespaces** tab. +1. In the left navigation bar, click **Role Templates** and go to the **Cluster** or **Project/Namespaces** tab. ### Membership and Role Assignment @@ -73,7 +73,7 @@ The following table lists the permissions available for the `Manage Nodes` role For details on how each cluster role can access Kubernetes resources, you can look them up in the Rancher UI: 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Click the **Cluster** tab. 1. Click the name of an individual role. The table shows all of the operations and resources that are permitted by the role. @@ -220,7 +220,7 @@ There are two methods for changing default cluster/project roles: You can change the cluster or project role(s) that are automatically assigned to the creating user. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Click the **Cluster** or **Project/Namespaces** tab. 1. Find the custom or individual role that you want to use as default. Then edit the role by selecting **⋮ > Edit Config**. 1. In the **Cluster Creator Default** or **Project Creator Default** section, enable the role as the default. diff --git a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md index 5e9c6c7a96d..7f44a211cf4 100644 --- a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md +++ b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/custom-roles.md @@ -31,7 +31,7 @@ While Rancher comes out-of-the-box with a set of default user roles, you can als The steps to add custom roles differ depending on the version of Rancher. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Select a tab to determine the scope of the role you're adding. The tabs are: - **Global:** The role is valid for allowing members to manage global scoped resources. @@ -65,7 +65,7 @@ The custom role can then be assigned to a user or group so that the role takes e To create a custom role based on an existing role, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Click the **Cluster** or **Project/Namespaces** tab. Click **Create Cluster Role** or **Create Project/Namespaces Role** depending on the scope. Note: Only cluster roles and project/namespace roles can inherit from another role. 1. Enter a name for the role. 1. In the **Inherit From** tab, select the role(s) that the custom role will inherit permissions from. @@ -86,7 +86,7 @@ Custom roles can be deleted, but built-in roles cannot be deleted. To delete a custom role, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 2. Go to the custom global role that should be deleted and click **⋮ (…) > Delete**. 3. Click **Delete**. diff --git a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md index a516c10fe5b..f08099bfba4 100644 --- a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md +++ b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions.md @@ -31,8 +31,8 @@ When you create a new local user, you assign them a global permission as you com To see the default permissions for new users, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. The **Roles** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **Global** tab, in the **New User Default** column, the permissions given to new users by default are indicated with a checkmark. +1. In the left navigation bar, click **Role Templates**. +1. The **Role Templates** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **Global** tab, in the **New User Default** column, the permissions given to new users by default are indicated with a checkmark. You can [change the default global permissions to meet your needs.](#configuring-default-global-permissions) @@ -43,8 +43,8 @@ When a user logs into Rancher using an external authentication provider for the To see the default permissions for new users, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. -1. The **Roles** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **New User Default** column on each page, the permissions given to new users by default are indicated with a checkmark. +1. In the left navigation bar, click **Role Templates**. +1. The **Role Templates** page has tabs for roles grouped by scope. Each table lists the roles in that scope. In the **New User Default** column on each page, the permissions given to new users by default are indicated with a checkmark. You can [change the default permissions to meet your needs.](#configuring-default-global-permissions) @@ -92,7 +92,7 @@ The following table lists each built-in global permission and whether it is incl For details on which Kubernetes resources correspond to each global permission, 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. If you click the name of an individual role, a table shows all of the operations and resources that are permitted by the role. :::note Notes: @@ -221,7 +221,7 @@ Default roles are only assigned to users added from an external authentication p To change the default global permissions that are assigned to external users upon their first log in, follow these steps: 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. On the **Roles** page, make sure the **Global** tab is selected. +1. In the left navigation bar, click **Role Templates**. On the **Role Templates** page, make sure the **Global** tab is selected. 1. Find the permissions set that you want to add or remove as a default. Then edit the permission by selecting **⋮ > Edit Config**. 1. If you want to add the permission as a default, Select **Yes: Default role for new users** and then click **Save**. If you want to remove a default permission, edit the permission and select **No**. @@ -234,7 +234,7 @@ To configure permission for a user, 1. In the upper left corner, click **☰ > Users & Authentication**. 1. In the left navigation bar, click **Users**. 1. Go to the user whose access level you want to change and click **⋮ > Edit Config**. -1. In the **Global Permissions** and **Built-in** sections, check the boxes for each permission you want the user to have. If you have created roles from the **Roles** page, they will appear in the **Custom** section and you can choose from them as well. +1. In the **Global Permissions** and **Built-in** sections, check the boxes for each permission you want the user to have. If you have created roles from the **Role Templates** page, they will appear in the **Custom** section and you can choose from them as well. 1. Click **Save**. **Result:** The user's global permissions have been updated. diff --git a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md index 4c4aec0be54..9cf6df0225f 100644 --- a/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md +++ b/versioned_docs/version-2.8/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/locked-roles.md @@ -36,7 +36,7 @@ You can lock roles in two contexts: Cluster roles and project/namespace roles can be locked, but global roles cannot. 1. In the upper left corner, click **☰ > Users & Authentication**. -1. In the left navigation bar, click **Roles**. +1. In the left navigation bar, click **Role Templates**. 1. Go to the **Cluster** tab or the **Project/Namespaces** tab. 1. From the role that you want to lock (or unlock), select **⋮ > Edit Config**. 1. From the **Locked** option, choose the **Yes** or **No** radio button. Then click **Save**.