Chapter 1. Configuring user access for your local Automation Hub
Chapter 1. Configuring user access for your local Automation Hub 1.1. About user access You can manage user access to content and features in automation hub by creating groups of users that have specific permissions. 1.1.1. How to implement user access User access is based on managing permissions to system objects (users, groups, namespaces) rather than by assigning permissions individually to specific users. You assign permissions to the groups you create. You can then assign users to these groups. This means that each user in a group has the permissions assigned to that group. Groups created in automation hub can range from system administrators responsible for governing internal collections, configuring user access, and repository management to groups with access to organize and upload internally developed content to automation hub. See Automation Hub permissions for information on system permissions. 1.1.2. Default user access When you install automation hub, the default admin user is created in the Admin group. This group is assigned all permissions in the system. 1.1.3. Getting started Log in to your local automation hub using credentials for the admin user configured during installation. The following sections describe the workflows associated with organizing your users who will access Automation Hub and providing them with required permissions to reach their goals. See the permissions reference table for a full list and description of all permissions available. 1.2. Creating a new group You can create and assign permissions to a group in automation hub that enables users to access specified features in the system. By default, there is an admins group in automation hub that has all permissions assigned and is available on initial login with credentials created when installing automation hub. Prerequisites You have groups permissions and can create and manage group configuration and access in automation hub. Procedure Log in to your local automation hub. Navigate to User Access Groups . Click Create . Provide a Name and click Create . You can now assign permissions and add users on the group edit page. 1.3. Assigning permissions to groups You can assign permissions to groups in automation hub that enable users to access specific features in the system. By default, new groups do not have any assigned permissions. You can add permissions upon initial group creation or edit an existing group to add or remove permissions Prerequisites You have Change group permissions and can edit group permissions in automation hub. Procedure Log in to your local automation hub. Navigate to User Access Roles . Click Add roles . Click in the name field and fill in the role name. Click in the description field and fill in the description. Complete the Permissions section. Click in the field for each permission type and select permissions that appear in the list. Click Save when finished assigning permissions. Navigate to User Access Groups . Click on a group name. Click on the Access tab. Click Add roles . Select the role created in step 8. Click to confirm the selected role. Click Add to complete adding the role. The group can now access features in automation hub associated with their assigned permissions. 1.4. Creating a new user You can create a user in automation hub and add them to groups that can access features in the system associated by the level of assigned permissions. Prerequisites You have user permissions and can create users in automation hub. Procedure Log in to your local automation hub. Go to Users . Click Create user . Provide information in each of the fields. Username and Password are required. [Optional] Assign the user to a group by clicking in the Groups field and selecting from the list of groups. Click Save . The new user will now appear in the list on the Users page. 1.5. Creating a super user You can create a super user in automation hub and spread administration work across your team. Prerequisites You have Super user permissions and can create users in automation hub. Procedure Log in to your local automation hub. Go to User Access . Click Users . Select the user you want to be a super user to see the User details page. Select Super User under User type. The user now has Super user permissions. 1.6. Adding users to groups You can add users to groups when creating a group or manually add users to existing groups. This section describes how to add users to an existing group. Prerequisites You have groups permissions and can create and manage group configuration and access in automation hub. Procedure Log in to automation hub. Navigate to User Access Groups . Click on a Group name. Navigate to the Users tab, then click Add . Select users to add from the list and click Add . You have added the users you selected to the group. These users now have permissions to use automation hub assigned to the group. 1.7. Creating a new group for content curators You can create a new group in automation hub designed to support content curation in your organization that contributes internally developed collections for publication in automation hub. This section shows you how to create a new group and assign the required permissions to help content developers create namespaces and upload their collections to automation hub. Prerequisites You have administrative permissions in automation hub and create groups. Procedure Log in to your local automation hub. Navigate to Groups and click Create . Enter Content Engineering as a Name for the group in the modal and click Create . You have created the new group and the Groups page appears. On the Permissions tab, click Edit . Under Namespaces , add permissions for Add Namespace , Upload to Namespace and Change Namespace . Click Save . The new group is created with the permissions you assigned. You can then add users to the group. Click the Users tab on the Groups page. Click Add . Select users from the modal and click Add . Conclusion You now have a new group who can use automation hub to: Create a namespace. Edit the namespace details and resources page. Upload internally developed collections to the namespace. 1.8. automation hub permissions Permissions provide a defined set of actions each group performs on a given object. Determine the required level of access for your groups based on the following permissions: Table 1.1. Permissions Reference Table Object Permission Description collection namespaces Add namespace Upload to namespace Change namespace Delete namespace Groups with these permissions can create, upload collections, or delete a namespace. collections Modify Ansible repo content Delete collections Groups with this permission can move content between repositories using the Approval feature, certify or reject features to move content from the staging to published or rejected repositories, abd delete collections. users View user Delete user Add user Change user Groups with these permissions can manage user configuration and access in automation hub. groups View group Delete group Add group Change group Groups with these permissions can manage group configuration and access in automation hub. collection remotes Change collection remote View collection remote Groups with these permissions can configure remote repository by navigating to Collections Repo Management . containers Change container namespace permissions Change containers Change image tags Create new containers Push to existing containers Delete container repository Groups with these permissions can manage container repositories in automation hub. remote registries Add remote registry Change remote registry Delete remote registry Groups with these permissions can add, change, or delete remote registries added to automation hub. task management Change task Delete task View all tasks Groups with these permissions can manage tasks added to Task Management in automation hub. 1.9. Deleting a user from automation hub When you delete a user account, the name and email of the user are permanently removed from automation hub. Prerequisites You have user permissions in automation hub. Procedure Log in to automation hub. Expand User Access . Click Users to display a list of the current users. Click the icon beside the user that you want to remove, then click Delete . Click Delete in the warning message to permanently delete the user.