public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-26 13:08:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Refactoring notes

Browse Source
This commit is contained in:
Jennifer Travinski
2022-07-06 13:39:07 -04:00
parent 7a2966aea6
commit e3d2aff995
6 changed files with 57 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/en/admin-settings/rbac/default-custom-roles/default-custom-roles.md
+14 -6
View File
@@ -7,7 +7,11 @@ Within Rancher, _roles_ determine what actions a user can make within a cluster
Note that _roles_ are different from _permissions_, which determine what clusters and projects you can access.
> It is possible for a custom role to enable privilege escalation. For details, see [this section.](#privilege-escalation)
:::tip
It is possible for a custom role to enable privilege escalation. For details, see [this section.](#privilege-escalation)
:::
This section covers the following topics:
@@ -99,11 +103,15 @@ When a user in the group logs in, they get the built-in Standard User global rol
If a user is removed from the external authentication provider group, they would lose their permissions from the custom role that was assigned to the group. They would continue to have their individual Standard User role.
> **Prerequisites:** You can only assign a global role to a group if:
>
> * You have set up an [external authentication provider]({{<baseurl>}}/rancher/v2.6/en/admin-settings/authentication/#external-vs-local-authentication)
> * The external authentication provider supports [user groups]({{<baseurl>}}/rancher/v2.6/en/admin-settings/authentication/user-groups/)
> * You have already set up at least one user group with the authentication provider
:::note Prerequisites:
You can only assign a global role to a group if:
* You have set up an [external authentication provider]({{<baseurl>}}/rancher/v2.6/en/admin-settings/authentication/#external-vs-local-authentication)
* The external authentication provider supports [user groups]({{<baseurl>}}/rancher/v2.6/en/admin-settings/authentication/user-groups/)
* You have already set up at least one user group with the authentication provider
:::
To assign a custom role to a group, follow these steps: