Access Management Tab

Access Management

The Access Management tab allows you to:

Create and revoke personal tokens
View and create groups for your organziation
View and create roles within your organization
View the list of users assigned to your organization
View policies for your organization
View the list of permissions for your organization

Below you can find more details about each of the sub-tabs.

Personal Tokens

Under Personal Tokens, you can create and revoke personal tokens. A personal token is a string of characters that you can use for authentication when accessing OCP® Console instead of the usual credentials.

Create a personal token

To create a personal token, proceed as follows:

Click + Create Token. The dialog box opens.

2. Fill in the required fields.

Name: Your personal token’s name.
Group: Select a group from the drop-down list.
Expires at: The expiration date of the token. By default, the toggle is switched off. If the toggle is switched on, the token will expire on the selected day.

3. Click Create. The token is created, and the following dialog box opens:

4. Copy and save your token!

It is important to copy and save your token aside, otherwise you will not be able to see it again!

5. Click Close when finished.

The created tokens are listed as shown below:

Revoke a personal token

When a personal token expires, its status is changed to Revoked. You can also revoke your token manually. To revoke a token, click the Menu button → Revoke.

You cannot delete a personal token.

Groups

Under the Groups tab, you are able to view a list of all the groups associated with your organization, as well as have the ability to create new groups.

Create group

To create a group in your organization, proceed as follows:

Click + Create Group. The dialog box opens.

Fill in the required fields.

Group Name: Your personal token’s name.
Description: Optional description for your group.

Click Add. The created group appears on the list of groups.

Add users to group

Once you have created a group, it is possible to include users. Follow the below steps to add a user to a group:

Select a group from the available groups list. You will be directed to a page showing the users associated with the chosen group.

Click + Add Users.
In the opened pop-up window, fill in the fields as described below:

Users: Input the user's email address. If the email is valid, it will be displayed in a drop-down menu. Finalize your selection by clicking on the email. You can add several users' emails at a time.
User Role: Identify the type of user role applicable to this group.

Click Add when finished. The newly added users will appear within the list of the group's members.

Roles

Within the Roles tab, you can see the list of existing roles for your organization, including predefined ones. In addition, a feature to create a new custom role is available in the same tab.

The displayed fields for each role include:

ID: The unique role ID.
Role Name: The specific name of the role.
Created at: The exact date when the role was established.

Create role

To create a role, proceed as follows:

Click + Create Role. The dialog box opens.

Enter a friendly name to identify the role.
Click Add. The created role appears on the list of roles.

Users

In the Users tab, you can view a complete list of your organization’s users and their details, such as:

User Name: The name of the user
Email: The email of the user
Groups: The number of groups the user is assigned to
Created at: The date of user account creation
Status: The activation status of the user

Click on a selected user to get more details as shown below:

Policies

In the Policies tab, you can view standard and custom policies created for your organization.

A policy is a set of permissions that effectively determine the level of access for users or roles within the organization for a more secure and well-managed working environment. Using policies, you can easily streamline the level of accessibility, controlling tasks such as who can view, edit, or delete certain data.

Permissions

In the Permissions tab, you can view the list of permissions available for your organization. Permissions define what actions can be performed by a user with the given role on certain endpoints for a specific service. These permissions can be applied to your organization’s policies.