diff --git a/content/rancher/v2.x/en/clusters/members/_index.md b/content/rancher/v2.x/en/clusters/members/_index.md index 3489a3fbf97..9f51ec378a2 100644 --- a/content/rancher/v2.x/en/clusters/members/_index.md +++ b/content/rancher/v2.x/en/clusters/members/_index.md @@ -1,4 +1,55 @@ --- -title: Cluster Members +title: Adding Users to Clusters weight: 2500 +aliases: + - /rancher/v2.x/en/tasks/clusters/adding-managing-cluster-members/ --- + +If you want to provide a user with access and permissions to _all_ projects, nodes, and resources within a cluster, assign the user a cluster membership. + +>**Tip:** Want to provide a user with access to a _specific_ project within a cluster? See [Adding Project Members]({{< baseurl >}}/rancher/v2.x/en/tasks/projects/add-project-members/) instead. + +There are two contexts where you can add cluster members: + +- [Adding Members to a New Cluster]({{< baseurl >}}/rancher/v2.x/en/tasks/clusters/creating-a-cluster) + + You can add members to a cluster as you create it (recommended if possible). + +- [Adding Members to an Existing Cluster](#adding-members-to-an-existing-cluster) + + You can always add members to a cluster later. See below. + +### Adding Members to an Existing Cluster + +Following cluster creation, you can add users as cluster members so that they can access its resources. + +1. From the **Global** view, open the cluster that you want to add members to. + +2. From the main menu, select **Members**. Then click **Add Member**. + +3. Search for the user or group that you want to add to the cluster. + + If external authentication is configured: + + - Rancher returns users from your [external authentication]({{< baseurl >}}/rancher/v2.x/en/concepts/global-configuration/authentication/) source as you type. + + >**Using AD but can't find your users?** + >There may be an issue with your search attribute configuration. See [Configuring Active Directory Authentication: Step 5]({{< baseurl >}}/rancher/v2.x/en/tasks/global-configuration/authentication/active-directory/). + + - A drop-down allows you to add groups instead of individual users. The drop-down only lists groups that you, the logged in user, are part of. + + >**Note:** If you are logged in as a local user, external users do not display in your search results. For more information, see [External Authentication Configuration and Principal Users]({{< baseurl >}}/rancher/v2.x/en/concepts/global-configuration/authentication/#external-authentication-configuration-and-principal-users). + +4. Assign the user or group **Cluster** roles. + + [What are Cluster Roles?]({{< baseurl >}}/rancher/v2.x/en/concepts/global-configuration/users-permissions-roles/#cluster-roles) + + >**Tip:** For Custom Roles, you can modify the list of individual roles available for assignment. + > + > - To add roles to the list, [Add a Custom Role]({{< baseurl >}}/rancher/v2.x/en/tasks/global-configuration/roles/#adding-a-custom-role). + > - To remove roles from the list, [Lock/Unlock Roles]({{< baseurl >}}/rancher/v2.x/en/tasks/global-configuration/roles/#locking-unlocking-roles). + +**Result:** The chosen users are added to the cluster. + +- To revoke cluster membership, select the user and click **Delete**. This action deletes membership, not the user. +- To modify a user's roles in the cluster, delete them from the cluster, and then re-add them with modified roles. diff --git a/content/rancher/v2.x/en/clusters/members/adding-users/_index.md b/content/rancher/v2.x/en/clusters/members/adding-users/_index.md deleted file mode 100644 index 46648353b6c..00000000000 --- a/content/rancher/v2.x/en/clusters/members/adding-users/_index.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -title: Adding Users to a Cluster -weight: 2505 ---- diff --git a/content/rancher/v2.x/en/tasks/clusters/adding-users-to-a-cluster/_index.md b/content/rancher/v2.x/en/tasks/clusters/adding-users-to-a-cluster/_index.md deleted file mode 100644 index 6ca749c3ab2..00000000000 --- a/content/rancher/v2.x/en/tasks/clusters/adding-users-to-a-cluster/_index.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -title: Adding Users to a Cluster -weight: 3425 -draft: true ---- -Coming Soon diff --git a/content/rancher/v2.x/en/tasks/projects/add-project-members/_index.md b/content/rancher/v2.x/en/tasks/projects/add-project-members/_index.md index 4dcbc3f94f5..04046b75e43 100644 --- a/content/rancher/v2.x/en/tasks/projects/add-project-members/_index.md +++ b/content/rancher/v2.x/en/tasks/projects/add-project-members/_index.md @@ -1,11 +1,11 @@ --- title: Adding Project Members -weight: +weight: --- If you want to provide a user with access and permissions to _specific_ projects and resources within a cluster, assign the user a project membership. ->**Tip:** Want to provide a user with access to _all_ projects within a cluster? See [Adding Cluster Members]({{< baseurl >}}/rancher/v2.x/en/tasks/clusters/adding-managing-cluster-members) instead. +>**Tip:** Want to provide a user with access to _all_ projects within a cluster? See [Adding Cluster Members]({{< baseurl >}}/rancher/v2.x/en/clusters/adding-users) instead. There are two contexts where you can add project members: @@ -28,9 +28,9 @@ Following project creation, you can add users as project members so that they ca 3. Search for the user or group that you want to add to the project. If external authentication is configured: - + - Rancher returns users from your external authentication source as you type. - + - A drop-down allows you to add groups instead of individual users. The dropdown only lists groups that you, the logged in user, are included in. >**Note:** If you are logged in as a local user, external users do not display in your search results.