RHIDP-3974 managing authorization using the Web UI

Signed-off-by: Fabrice Flore-Thébault <[email protected]>

Author: themr0c

assemblies/assembly-configuring-authorization-in-rhdh.adoc

@@ -4,6 +4,9 @@
 include::modules/authorization/con-rbac-overview.adoc[leveloffset=+1]
 
 
+include::assembly-managing-authorizations-by-using-the-rhdh-web-ui.adoc[leveloffset=+1]
+
+
 include::modules/authorization/ref-rbac-permission-policies.adoc[leveloffset=+1]
 
 
@@ -29,17 +32,6 @@ include::modules/authorization/ref-rbac-conditional-policy-definition.adoc[level
 include::modules/authorization/proc-rbac-config-conditional-policy-file.adoc[leveloffset=+2]
 
 
-include::modules/authorization/proc-rbac-ui-manage-roles.adoc[leveloffset=+1]
-
-
-include::modules/authorization/proc-rbac-ui-create-role.adoc[leveloffset=+2]
-
-
-include::modules/authorization/proc-rbac-ui-edit-role.adoc[leveloffset=+2]
-
-
-include::modules/authorization/proc-rbac-ui-delete-role.adoc[leveloffset=+2]
-
 
 include::modules/authorization/con-user-stats-rhdh.adoc[leveloffset=+1]
 

assemblies/assembly-managing-authorizations-by-using-the-rhdh-web-ui.adoc

@@ -0,0 +1,15 @@
+[id='proc-rbac-ui-manage-roles_{context}']
+= Managing role-based access controls (RBAC) using the {product} Web UI
+
+Policy administrators can use the {product-short} web interface (Web UI) to allocate specific roles and permissions to individual users or groups. Allocating roles ensures that access to resources and functionalities is regulated across the {product-short}.
+
+With the policy administrator role in {product-short}, you can assign permissions to users and groups, which allow users or groups to view, create, modify, and delete the roles using the {product-short} Web UI.
+
+
+include::modules/authorization/proc-rbac-ui-create-role.adoc[leveloffset=+1]
+
+
+include::modules/authorization/proc-rbac-ui-edit-role.adoc[leveloffset=+1]
+
+
+include::modules/authorization/proc-rbac-ui-delete-role.adoc[leveloffset=+1]

modules/authorization/proc-rbac-ui-create-role.adoc

@@ -4,9 +4,7 @@
 You can create a role in the {product} using the Web UI.
 
 .Prerequisites
-* You have an administrator role in the {product-short}.
-* You have installed the `@janus-idp/backstage-plugin-rbac` plugin in {product-short}. For more information, see link:{LinkPluginsGuide}[{NameOfPluginsGuide}].
-* You have configured the required permission policies. For more information, see xref:con-rbac-config-permission-policies_{context}[].
+* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}].
 
 .Procedure
 

modules/authorization/proc-rbac-ui-delete-role.adoc

@@ -9,9 +9,7 @@ The policies generated from a `policy.csv` or ConfigMap file cannot be edited or
 ====
 
 .Prerequisites
-* You have an administrator role in the {product-short}.
-* You have installed the `@janus-idp/backstage-plugin-rbac` plugin in {product-short}. For more information, see link:{LinkPluginsGuide}[{NameOfPluginsGuide}].
-* You have configured the required permission policies. For more information, see xref:con-rbac-config-permission-policies_{context}[].
+* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}].
 * The role that you want to delete is created in the {product-short}.
 
 .Procedure
@@ -26,4 +24,4 @@ The *RBAC* tab appears, displaying all the created roles in the {product-short}.
 . Select the delete icon from the *Actions* column for the role that you want to delete.
 +
 *Delete this role?* pop-up appears on the screen.
-. Click *DELETE*.
+. Click *DELETE*.

modules/authorization/proc-rbac-ui-edit-role.adoc

@@ -9,9 +9,7 @@ The policies generated from a `policy.csv` or ConfigMap file cannot be edited or
 ====
 
 .Prerequisites
-* You have an administrator role in the {product-short}.
-* You have installed the `@janus-idp/backstage-plugin-rbac` plugin in {product-short}. For more information, see link:{LinkPluginsGuide}[{NameOfPluginsGuide}].
-* You have configured the required permission policies. For more information, see xref:con-rbac-config-permission-policies_{context}[].
+* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}].
 * The role that you want to edit is created in the {product-short}.
 
 .Procedure