Skip to content

Commit 04afe22

Browse files
Merge pull request #1871 from ThumulaPerera/add-tip-for-authz-docs
Add tip to specify env wise access control is only available in slected orgs
2 parents e313366 + 8ead540 commit 04afe22

File tree

4 files changed

+26
-0
lines changed

4 files changed

+26
-0
lines changed

en/developer-docs/docs/administer/configure-access-control.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,10 @@ Follow the steps given below to assign the **Developer** role to the **Engineeri
5353
5. Click **+Assign Roles**.
5454
6. In the **Assign Roles to Group in Project** dialog that opens, click the **Roles** list and select **Developer**.
5555
7. Click **Selected Environments** radio button under **Applicable Environments**
56+
57+
!!! warning "Important"
58+
Configuring the Applicable Environment for a Role to Group assignment is currently available only for selected organizations.
59+
5660
8. Select **Development** environment from the environment selecction dropdown
5761
7. Click **Assign**. This assigns the **Developer** role to the group. You should see the mapping level as **Project (Engineering Project)** and Applicable Environment as **Development** indicating the type of the asssignment:
5862

en/developer-docs/docs/choreo-concepts/access-control.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,9 @@ By combining these attributes, you can create four types of assignments.
7070
|`Environement Scoped`|Organization|Environment|
7171
|`Project-Environment Scoped`|Project|Environment|
7272

73+
!!! warning "Important"
74+
Configuring the Applicable Environment for a Role to Group assignment is currently available only for selected organizations.
75+
7376
!!! warning "Important"
7477
Avoid assigning multiple roles to the same group across different projects or mapping levels (organization and project). Doing so can give users unintended permissions in some projects, allowing access to tasks they shouldn’t perform. To ensure proper access control, assign only one role to a group across projects or mapping levels.
7578

@@ -114,6 +117,9 @@ For environement scoped assignments, allowing **non environment specific** actio
114117
!!! example
115118
Suppose you assign the Developer role to the Engineering Developer group, but only for the Development environment of the Engineering project. The purpose of this assignment is not to prevent developers from performing actions like `build component`, which don’t depend on a specific environment. Instead, the goal is to restrict developers from performing actions such as `promote component` on environments they aren’t authorized to access, like Production.
116119

120+
!!! warning "Important"
121+
Environment Scoped Assignments are currently available only for selected organizations.
122+
117123
!!! warning "Important"
118124
Exercise care when creating environment scoped role-to-group assignments. Only environment specific actions are restricted to that environment; all other actions remain allowed on resources across the organization.
119125

@@ -125,6 +131,9 @@ For environement scoped assignments, allowing **non environment specific** actio
125131

126132
Similar to previous case, allowing **non environment specific** actions on resources across project is intentional. This design aligns with real world Access Control use cases.
127133

134+
!!! warning "Important"
135+
Project-Environment Scoped Assignments are currently available only for selected organizations.
136+
128137
!!! warning "Important"
129138
Exercise care when creating project-environment scoped role-to-group assignments. Only environment specific actions are restricted to that environment; all other actions remain allowed on resources across the project.
130139

en/pe-docs/docs/choreo-concepts/access-control.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,9 @@ By combining these attributes, you can create four types of assignments.
7070
|`Environement Scoped`|Organization|Environment|
7171
|`Project-Environment Scoped`|Project|Environment|
7272

73+
!!! warning "Important"
74+
Configuring the Applicable Environment for a Role to Group assignment is currently available only for selected organizations.
75+
7376
!!! warning "Important"
7477
Avoid assigning multiple roles to the same group across different projects or mapping levels (organization and project). Doing so can give users unintended permissions in some projects, allowing access to tasks they shouldn’t perform. To ensure proper access control, assign only one role to a group across projects or mapping levels.
7578

@@ -114,6 +117,9 @@ For environement scoped assignments, allowing **non environment specific** actio
114117
!!! example
115118
Suppose you assign the Developer role to the Engineering Developer group, but only for the Development environment of the Engineering project. The purpose of this assignment is not to prevent developers from performing actions like `build component`, which don’t depend on a specific environment. Instead, the goal is to restrict developers from performing actions such as `promote component` on environments they aren’t authorized to access, like Production.
116119

120+
!!! warning "Important"
121+
Environment Scoped Assignments are currently available only for selected organizations.
122+
117123
!!! warning "Important"
118124
Exercise care when creating environment scoped role-to-group assignments. Only environment specific actions are restricted to that environment; all other actions remain allowed on resources across the organization.
119125

@@ -125,6 +131,9 @@ For environement scoped assignments, allowing **non environment specific** actio
125131

126132
Similar to previous case, allowing **non environment specific** actions on resources across project is intentional. This design aligns with real world Access Control use cases.
127133

134+
!!! warning "Important"
135+
Project-Environment Scoped Assignments are currently available only for selected organizations.
136+
128137
!!! warning "Important"
129138
Exercise care when creating project-environment scoped role-to-group assignments. Only environment specific actions are restricted to that environment; all other actions remain allowed on resources across the project.
130139

en/pe-docs/docs/user-management/groups-and-roles/configure-access-control.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,10 @@ Follow the steps given below to assign the **Developer** role to the **Engineeri
5353
5. Click **+Assign Roles**.
5454
6. In the **Assign Roles to Group in Project** dialog that opens, click the **Roles** list and select **Developer**.
5555
7. Click **Selected Environments** radio button under **Applicable Environments**
56+
57+
!!! warning "Important"
58+
Configuring the Applicable Environment for a Role to Group assignment is currently available only for selected organizations.
59+
5660
8. Select **Development** environment from the environment selecction dropdown
5761
7. Click **Assign**. This assigns the **Developer** role to the group. You should see the mapping level as **Project (Engineering Project)** and Applicable Environment as **Development** indicating the type of the asssignment:
5862

0 commit comments

Comments
 (0)