From 924663747cb89874b9cdac5e1a80891a44948937 Mon Sep 17 00:00:00 2001 From: Denise Schannon Date: Mon, 30 Mar 2020 19:00:28 -0700 Subject: [PATCH] small updates around custom global roles --- .../rbac/default-custom-roles/_index.md | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/content/rancher/v2.x/en/admin-settings/rbac/default-custom-roles/_index.md b/content/rancher/v2.x/en/admin-settings/rbac/default-custom-roles/_index.md index 11c7bd0f80b..833462a1238 100644 --- a/content/rancher/v2.x/en/admin-settings/rbac/default-custom-roles/_index.md +++ b/content/rancher/v2.x/en/admin-settings/rbac/default-custom-roles/_index.md @@ -13,8 +13,7 @@ This section covers the following topics: - [Prerequisites](#prerequisites) - [Creating a custom role for a cluster or project](#creating-a-custom-role-for-a-cluster-or-project) -- [Creating a custom global role that copies rules from an existing role](#creating-a-custom-global-role-that-copies-rules-from-an-existing-role) -- [Creating a custom global role that does not copy rules from another role](#creating-a-custom-global-role-that-does-not-copy-rules-from-another-role) +- [Creating a custom global role](#creating-a-custom-global-role) - [Deleting a custom global role](#deleting-a-custom-global-role) - [Assigning a custom global role to a group](#assigning-a-custom-global-role-to-a-group) @@ -93,10 +92,12 @@ The steps to add custom roles differ depending on the version of Rancher. {{% /tab %}} {{% /tabs %}} -## Creating a Custom Global Role that Copies Rules from an Existing Role +## Creating a Custom Global Role _Available as of v2.4.0_ +### Creating a Custom Global Role that Copies Rules from an Existing Role + If you have a group of individuals that need the same level of access in Rancher, it can save time to create a custom global role in which all of the rules from another role, such as the administrator role, are copied into a new role. This allows you to only configure the variations between the existing role and the new role. The custom global role can then be assigned to a user or group so that the custom global role takes effect the first time the user or users sign into Rancher. @@ -110,9 +111,7 @@ To create a custom global role based on an existing role, 1. In the **Grant Resources** section, select the Kubernetes resource operations that will be enabled for users with the custom role. 1. Click **Save.** -## Creating a Custom Global Role that Does Not Copy Rules from Another Role - -_Available as of v2.4.0_ +### Creating a Custom Global Role that Does Not Copy Rules from Another Role Custom global roles don't have to be based on existing roles. To create a custom global role by choosing the specific Kubernetes resource operations that should be allowed for the role, follow these steps: @@ -164,4 +163,4 @@ To assign a custom global role to a group, follow these steps: 1. Optional: In the **Global Permissions** or **Built-in** sections, select any additional permissions that the group should have. 1. Click **Create.** -**Result:** The custom global role will take effect when the users in the group log into Rancher. \ No newline at end of file +**Result:** The custom global role will take effect when the users in the group log into Rancher.