Skip to content

Latest commit

 

History

History
324 lines (257 loc) · 9.65 KB

permissions.md

File metadata and controls

324 lines (257 loc) · 9.65 KB
sidebar_label title description icon hide_table_of_contents sidebar_position tags
Permissions
Permissions
Review the available permissions in Palette.
false
25
user-management
permissions
rbac

All actions in Palette are controlled by permissions. Permissions are assigned to roles, and roles are assigned to users or teams. Each Palette component has a corresponding resource key and a set of operations that can be performed on that component.

Palette components are managed at different scopes. The available scopes are Tenant and Project. The Tenant scope is global and applies to all projects within the tenant. The Project scope is specific to a project.

Components and Resource Keys

The following table lists the available Palette components, their corresponding resource keys, and the applicable Role scopes you can assign permissions to.

Component Resource Key Tenant Role Scope Project Role Scope Resource Role Scope Description
API Key apiKey ✅ API Key related operations
Audit audit ✅ Audit log access
App Deployment appDeployment ✅ ✅ Application deployment and management in the context of Palette Dev Engine
App Profile appProfile ✅ Management of Application profiles
Cloud Account cloudaccount ✅ ✅ ✅ Cloud account creation and management
Cloud Config cloudconfig ✅ ✅ ✅ Cluster level cloud configuration
Cluster cluster ✅ ✅ ✅ Creation and management of Palette workload clusters
Cluster Pair clusterPair ✅ ✅ Management of cluster pairing requests.
Cluster Group clusterGroup ✅ ✅ Creation and management of cluster groups
Cluster Profile clusterProfile ✅ ✅ ✅ Creation and management of Palette cluster profiles
DNS Mapping dnsMapping ✅ ✅ Domain Name Server mapping services creation and management
Edge Host edgehost ✅ ✅ Edge host deployment and management
Edge Host Token edgeToken ✅ Edge host registration token management
Filter filter ✅ Creation and management of resource filters
Location location ✅ ✅ ✅ Location services related to backup and restore
Macro macro ✅ ✅ ✅ Key value management for Palette resources
Machine machine ✅ ✅ ✅ Palette node pool management
Private Gateway privateGateway ✅ Private Cloud Gateway creation and maintenance
Registry packRegistry ✅ ✅ ✅ Creation and management of registries
Role role ✅ Creation and management of Palette roles
Project project ✅ ✅ Creation and management of Palette projects
Tag tag ✅ ✅ Creation and management of tags
Team team ✅ Creation and management of user teams
User user ✅ Creation and management of users
Virtual Cloud Config virtualCloudConfig ✅ Allows the user to deploy and manage applications in virtual clusters
Virtual Cluster virtualCluster ✅ Creation and management of virtual clusters
Virtual Machine virtualMachine ✅ Creation and management of virtual machines
Workspace workspace ✅ Workspace operations including backup and restore

Operations

To review the operations that can be performed on each component, click on the Palette component name below to display the list of operations.

  • create
  • get
  • list
  • update
  • delete
  • get
  • list
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • publish
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • sshUpdate
  • sshUserUpdate
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • create
  • delete
  • get
  • list
  • update
  • clone
  • migrate
  • pause
  • restart
  • resume
  • snapshotCreate
  • snapshotDelete
  • snapshotGet
  • snapshotList
  • snapshotUpdate
  • start
  • stop
  • create
  • delete
  • get
  • list
  • update
  • restore
  • backup