Skip to main content

Access Control FAQ

Which roles exist at first?​

Three: role:default/developer, role:default/astrolabe-administrator and role:default/astrolabe-member.

Why can't I change a role?​

A role tagged File comes from the configuration file of the instance: its page has no button to add, edit or delete. To make a person an administrator, see Give administrator rights to someone.

Why is a button locked, with a padlock?​

Your role does not allow it. Hover the button: the tooltip says which right is missing. Ask an administrator to give it to you.

Which plugins can a role act on?​

The tab Rights, after Edit rights, shows one line per plugin: catalog, scaffolder, compass, orion-dashboard, announcements, administration, licensing, cost-insights and the others Astrolabe has.

Which actions can I give?​

Read, Create, Update, Delete, for each plugin. A box gives the action on all the permissions of the plugin. What the boxes do not cover (other actions, refusals, rules under conditions) shows in the column Advanced and does not change when you save.

How do I see what a person can do?​

Open each role: the tab Members lists its users and groups, the tab Rights what it gives. See See the roles and what they give.

How do I check that a role works?​

Sign in with a person of the role and open the screens it should change: see Check what a role gives.

Do new rights apply at once?​

They apply when the person signs in.

What does a person with no administration right see?​

The left sidebar shows Search, My Dashboards, Catalog, Documentation, The Foundry and, when it is on, Tech Atlas. There is no Administration. The person reads the catalog, the announcements, the Compass scores, the radar and their notifications, registers a component, and watches components. The role role:default/developer gives no more.

The page Off the Charts says Your Astrolabe couldn't locate these coordinates. The buttons Return to Home Port and Previous Coordinates lead out.