Skip to content

Commit 54bdf0b

Browse files
authored
adding more information for permissions and user mappings
1 parent 8f10776 commit 54bdf0b

File tree

1 file changed

+10
-1
lines changed
  • umbraco-cloud/begin-your-cloud-journey/the-cloud-portal/login-providers

1 file changed

+10
-1
lines changed

umbraco-cloud/begin-your-cloud-journey/the-cloud-portal/login-providers/README.md

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -233,6 +233,11 @@ The dropdown has two possible permissions:
233233
- Read Only
234234
- Read and Write
235235

236+
237+
**Read:** A team member with Read permissions can only view the project in the portal as well as the backoffices. They are not able to deploy or change anything on the project itself.
238+
239+
**Read And Write:** A team member with Write permissions can do everything on a project except delete it and edit the team. A user with Write permissions can deploy changes between environments through the portal.
240+
236241
This value is meant to be a fallback value and can be overwritten by "Project User Mappings" setting.
237242
If there are no Mappings available for the user the "No Claim Found Behavior" setting will evaluate if this fallback Permissions is used or "NoAccess".
238243

@@ -254,7 +259,11 @@ Enter the name of your providers default or custom Role claim name. This is if y
254259

255260
**Project User Mappings**
256261

257-
Here you can set up mapping between the "Provider Role Value" and the Project Permission Level.
262+
Here you can set up a mapping between the Provider Role Value (a role coming from your external login provider) and a Project Permission Level in the portal.
263+
264+
If your external login provider (e.g., Azure AD, Google, etc.) is configured to assign roles to users, those role values will be included in the ID token. You can then use these values to automatically assign the appropriate access level when the user signs in to the portal.
265+
266+
For example, a role like Happy.Write from your identity provider could be mapped to the Read And Write permission level for your project in the portal.
258267

259268
## Audit
260269

0 commit comments

Comments
 (0)