...
Group Management is controlled via the Settings panel under the Groups UI. This tool is ONLY visible to the Administrators and Power User Roles at this time.
...
Site Role Access is managed in a separate space from normal groups, even though they are all (technically) groups. As such, ONLY Opsera and Site Administrators can manage those. Power Users are limited to standard group management only. At this time, a user must be a Power User to perform group management.
...
This functionality operates the same way as Tool Registry. If NO rules are applied, all users have access to an item. If specific rules are set (either via a custom group or direct user) then that takes over.
...
Access Role Type | Access Policy | Description |
Owner | Full Access | |
Administrator | Full Access | |
Manager Site Level Power User | Power User Type Policy | Please note, this role is the same as a Site Level Power User. · View Step Configuration · Edit Step Details · Publish a pipeline to catalog · Duplicate a Pipeline · Stop, Start, Reset Pipeline · Approve Step when pipeline is waiting (this may not apply via Slack, so have to flush out the services end on this still.) · Edit Access Roles · Edit Step Notification Rules |
User | End User Type Policy | This is the standard user policy so it’s designed to give users just enough access to run, stop, reset pipeline. That’s it. As such they will see all pipeline activity logs too. |
Guest | Read Only Access | This is used to allow a user to see a pipeline in the UI. They would have only read access to it but as such can search logs, view activity. Without this access, the user would not even know the pipeline exists. |
Ownership - Tool Registry
This functionality operates the same way as Pipelines. If NO rules are applied, all users have access to an item. If specific rules are set (either via a custom group or direct user) then that takes over.
...
Access Role Type | Access Policy | Description |
Owner | Full Access | |
Administrator | Full Access | |
Manager Site Level Power User | Power User Type Policy | Please note, this role is the same as a Site Level Power User. · edit tool settings · user tool in pipeline (not implemented yet) · edit tool connection tab · edit tool job/project/ account tabs · create a tool |
User | End User Type Policy | When complete, this will be the standard user policy where users can select and use the tool. This user should be able to see the tool log output. NOT YET COMPLETE. |
Guest | Read Only Access | When complete, this would imply the user can see the tool in the list so that they can see who the owner is, other location data or any attributes stored on the tool, BUT they could not use it. NOT YET COMPLETE. |