diff --git a/assemblies/assembly-configuring-authorization-in-rhdh.adoc b/assemblies/assembly-configuring-authorization-in-rhdh.adoc index 476178fe3a..e383912234 100644 --- a/assemblies/assembly-configuring-authorization-in-rhdh.adoc +++ b/assemblies/assembly-configuring-authorization-in-rhdh.adoc @@ -30,6 +30,9 @@ To apply RBAC in {product-short}: include::modules/authorization/proc-enabling-the-rbac-plugin.adoc[leveloffset=+1] +include::assembly-managing-authorizations-by-using-the-rhdh-web-ui.adoc[leveloffset=+1] + + include::modules/authorization/ref-rbac-permission-policies.adoc[leveloffset=+1] @@ -52,17 +55,6 @@ include::modules/authorization/ref-rbac-conditional-policy-definition.adoc[level include::modules/authorization/proc-rbac-config-conditional-policy-file.adoc[leveloffset=+2] -include::modules/authorization/proc-rbac-ui-manage-roles.adoc[leveloffset=+1] - - -include::modules/authorization/proc-rbac-ui-create-role.adoc[leveloffset=+2] - - -include::modules/authorization/proc-rbac-ui-edit-role.adoc[leveloffset=+2] - - -include::modules/authorization/proc-rbac-ui-delete-role.adoc[leveloffset=+2] - include::modules/authorization/con-user-stats-rhdh.adoc[leveloffset=+1] diff --git a/assemblies/assembly-managing-authorizations-by-using-the-rhdh-web-ui.adoc b/assemblies/assembly-managing-authorizations-by-using-the-rhdh-web-ui.adoc new file mode 100644 index 0000000000..88655ee776 --- /dev/null +++ b/assemblies/assembly-managing-authorizations-by-using-the-rhdh-web-ui.adoc @@ -0,0 +1,15 @@ +[id='proc-rbac-ui-manage-roles_{context}'] += Managing role-based access controls (RBAC) using the {product} Web UI + +Policy administrators can use the {product-short} web interface (Web UI) to allocate specific roles and permissions to individual users or groups. Allocating roles ensures that access to resources and functionalities is regulated across the {product-short}. + +With the policy administrator role in {product-short}, you can assign permissions to users and groups. This role allows you to view, create, modify, and delete the roles using {product-short} Web UI. + + +include::modules/authorization/proc-rbac-ui-create-role.adoc[leveloffset=+1] + + +include::modules/authorization/proc-rbac-ui-edit-role.adoc[leveloffset=+1] + + +include::modules/authorization/proc-rbac-ui-delete-role.adoc[leveloffset=+1] diff --git a/modules/authorization/proc-rbac-ui-create-role.adoc b/modules/authorization/proc-rbac-ui-create-role.adoc index f26abb6cd2..97e514aa03 100644 --- a/modules/authorization/proc-rbac-ui-create-role.adoc +++ b/modules/authorization/proc-rbac-ui-create-role.adoc @@ -4,9 +4,7 @@ You can create a role in the {product} using the Web UI. .Prerequisites -* You have an administrator role in the {product-short}. -* You have installed the `@janus-idp/backstage-plugin-rbac` plugin in {product-short}. For more information, see link:{LinkPluginsGuide}[{NameOfPluginsGuide}]. -* You have configured the required permission policies. For more information, see xref:con-rbac-config-permission-policies_{context}[]. +* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}]. .Procedure diff --git a/modules/authorization/proc-rbac-ui-delete-role.adoc b/modules/authorization/proc-rbac-ui-delete-role.adoc index 48746147af..867ec2bf6d 100644 --- a/modules/authorization/proc-rbac-ui-delete-role.adoc +++ b/modules/authorization/proc-rbac-ui-delete-role.adoc @@ -9,9 +9,7 @@ The policies generated from a `policy.csv` or ConfigMap file cannot be edited or ==== .Prerequisites -* You have an administrator role in the {product-short}. -* You have installed the `@janus-idp/backstage-plugin-rbac` plugin in {product-short}. For more information, see link:{LinkPluginsGuide}[{NameOfPluginsGuide}]. -* You have configured the required permission policies. For more information, see xref:con-rbac-config-permission-policies_{context}[]. +* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}]. * The role that you want to delete is created in the {product-short}. .Procedure @@ -26,4 +24,4 @@ The *RBAC* tab appears, displaying all the created roles in the {product-short}. . Select the delete icon from the *Actions* column for the role that you want to delete. + *Delete this role?* pop-up appears on the screen. -. Click *DELETE*. \ No newline at end of file +. Click *DELETE*. diff --git a/modules/authorization/proc-rbac-ui-edit-role.adoc b/modules/authorization/proc-rbac-ui-edit-role.adoc index 58387edfa2..c426d62f3b 100644 --- a/modules/authorization/proc-rbac-ui-edit-role.adoc +++ b/modules/authorization/proc-rbac-ui-edit-role.adoc @@ -9,9 +9,7 @@ The policies generated from a `policy.csv` or ConfigMap file cannot be edited or ==== .Prerequisites -* You have an administrator role in the {product-short}. -* You have installed the `@janus-idp/backstage-plugin-rbac` plugin in {product-short}. For more information, see link:{LinkPluginsGuide}[{NameOfPluginsGuide}]. -* You have configured the required permission policies. For more information, see xref:con-rbac-config-permission-policies_{context}[]. +* You xref:enabling-and-giving-access-to-rbac[have enabled RBAC and have a policy administrator role in {product-short}]. * The role that you want to edit is created in the {product-short}. .Procedure diff --git a/modules/authorization/proc-rbac-ui-manage-roles.adoc b/modules/authorization/proc-rbac-ui-manage-roles.adoc deleted file mode 100644 index 09ca3d11de..0000000000 --- a/modules/authorization/proc-rbac-ui-manage-roles.adoc +++ /dev/null @@ -1,10 +0,0 @@ -[id='proc-rbac-ui-manage-roles_{context}'] -= Managing role-based access controls (RBAC) using the {product} Web UI - -Administrators can use the {product-short} web interface (Web UI) to allocate specific roles and permissions to individual users or groups. Allocating roles ensures that access to resources and functionalities is regulated across the {product-short}. - -With the administrator role in {product-short}, you can assign permissions to users and groups, which allow users or groups to view, create, modify, and delete the roles using the {product-short} Web UI. - -To access the RBAC features in the Web UI, you must install and configure the `@janus-idp/backstage-plugin-rbac` plugin as a dynamic plugin. For more information about installing a dynamic plugin, see link:{LinkPluginsGuide}[{NameOfPluginsGuide}]. - -After you install the `@janus-idp/backstage-plugin-rbac` plugin, the *Administration* option appears at the bottom of the sidebar. When you can click *Administration*, the RBAC tab appears by default, displaying all of the existing roles created in the {product-short}. In the RBAC tab, you can also view the total number of users, groups, and the total number of permission policies associated with a role. You can also edit or delete a role using the *Actions* column. \ No newline at end of file