Chapter 1. Configuring user access for your local Automation Hub
1.1. About user access
You can manage user access to content and features in Automation Hub by creating groups of users that have specific permissions.
1.1.1. How to implement user access
User access is based on managing permissions to system objects (users, groups, namespaces) rather than by assigning permissions individually to specific users.
You assign permissions to the groups you create. You can then assign users to these groups. This means that each user in a group has the permissions assigned to that group.
Groups created in Automation Hub can range from system administrators responsible for governing internal collections, configuring user access, and repository management to groups with access to organize and upload internally developed content to Automation Hub.
- See Automation Hub permissions for information on system permissions.
1.1.2. Default user access
When you install Automation hub, the default admin user is created in the Admin group. This group is assigned all permissions in the system.
1.1.3. Getting started
Log in to your local Automation Hub using credentials for the admin user configured during installation.
The following sections describe the workflows associated with organizing your users who will access Automation Hub and providing them with required permissions to reach their goals. See the permissions reference table for a full list and description of all permissions available.
1.2. Creating a new group
You can create and assign permissions to a group in Automation Hub that enables users to access specified features in the system. By default, there is an admins group in Automation Hub that has all permissions assigned and is available on initial login with credentials created when installing Automation Hub.
Prerequisites
- You have groups permissions and can create and manage group configuration and access in Automation Hub.
Procedure
- Log in to your local Automation Hub.
- Navigate to menu:User Access[Groups].
- Click btn:[Create].
- Provide a Name and click btn:[Create].
You can now assign permissions and add users on the new group edit page.
1.3. Assigning permissions to groups
You can assign permissions to groups in Automation Hub that enable users to access specific features in the system. By default, new groups do not have any assigned permissions. You can add permissions upon initial group creation or edit an existing group to add or remove permissions
Prerequisites
- You have Change group permissions and can edit group permissions in Automation Hub.
Procedure
- Log in to your local Automation Hub.
- Navigate to menu:User Access[Groups].
- Click on a group name.
- Select the Permissions tab, then click btn:[Edit].
- Click in the field for each permission type and select permissions that appear in the list.
- Click btn:[Save] when finished assigning permissions.
The group can now access features in Automation Hub associated the their assigned permissions.
1.4. Creating a new user
You can create a user in Automation Hub and add them to groups that can access features in the system associated by the level of assigned permissions.
Prerequisites
- You have user permissions and can create users in Automation Hub.
Procedure
- Log in to your local Automation Hub.
- Navigate to menu:Users[].
- Click btn:[Create user].
- Provide information in each of the fields. Username and Password are required.
- [Optional] Assign the user to a group by clicking in the Groups field and selecting from the list of groups.
- Click btn:[Save].
The new user will now appear in the list on the Users page.
1.5. Creating a super user
You can create a super user in automation hub and spread administration work across your team.
Prerequisites
- You have Super user permissions and can create users in automation hub.
Procedure
- Log in to your local automation hub.
- Navigate to menu:User Access[].
- Click btn:[Users].
- Select the user you want to be a super user to see the User details page.
- Select Super User under User type.
The user now has Super user permissions.
1.6. Adding users to groups
You can add users to groups when creating a group or manually add users to existing groups. This section describes how to add users to an existing group.
Prerequisites
- You have groups permissions and can create and manage group configuration and access in Automation Hub.
Procedure
- Log in to Automation Hub
- Navigate to menu:User Access[Groups].
- Click on a Group name.
- Navigate to the menu:Users[] tab, then click btn:[Add].
- Select users to add from the list and click btn:[Add].
You have now added the users you selected to the group. These users now have permissions to use Automation Hub assigned to the group.
1.7. Creating a new group for content curators
You can create a new group in Automation Hub designed to support content curation in your organization who will contribute internally developed collections for publication in Automation Hub.
In this section you will create a new group and assign the required permissions to help content developers create namespaces and upload their collections to Automation Hub.
Prerequisites
- You have admin permissions in Automation Hub and create groups.
Procedure
- Log in to your local Automation Hub.
- Navigate to menu:Groups[] and click btn:[Create].
- Enter Content Engineering as a Name for the group in the modal and click btn:[Create]. The new group is created and the Groups page will appear.
- On the Permissions tab, click btn:[Edit].
- Under Namespaces, add permissions for Add Namespace, Upload to Namespace and Change Namespace.
Click btn:[Save].
The new group is created with the permissions you assigned. Next you can add users to the group.
- Click the Users tab on the Groups page.
- Click btn:[Add].
- Select users from the modal and click btn:[Add].
Conclusion
You now have a new group who can use Automation Hub to:
- create a namespace,
- edit the namespace details and resources page
- upload internally developed collections to the namespace.
1.8. Automation Hub permissions
Permissions provide a defined set of actions each group performs on a given object. Determine the required level of access for your groups based on the following permissions:
Table 1.1. Permissions Reference Table
Object | Permission | Description |
---|---|---|
namespace | Add namespace Upload to namespace Change namespace Delete namespace | Groups with these permissions can create, upload collections, or delete a namespace. |
collections | Modify Ansible repo content Delete collections | Groups with this permission can move content between repositories using the Approval feature, certify or reject features to move content from the staging to published or rejected repositories, abd delete collections. |
users | View user Delete user Add user Change user | Groups with these permissions can manage user configuration and access in automation hub. |
groups | View group Delete group Add group Change group | Groups with these permissions can manage group configuration and access in automation hub. |
collection remotes | Change collection remote View collection remote | Groups with these permissions can configure remote repository by navigating to menu:Collections[Repo Management]. |
containers | Change container namespace permissions Change containers Change image tags Create new containers Push to existing containers Delete container repository | Groups with these permissions can manage container repositories in automation hub. |
remote registries | Add remote registry Change remote registry Delete remote registry | Groups with these permissions can add, change, or delete remote registries added to automation hub. |
task management | Change task Delete task View all tasks | Groups with these permissions can manage tasks added to Task Management in automation hub. |
1.9. Deleting a user from automation hub
When you delete a user account, the name and email of the user are permanently removed from automation hub.
Prerequisites
- You have user permissions in automation hub.
Procedure
- Log in to automation hub.
- Expand menu:User Access[].
- Click btn:[Users] to display a list of the current users.
- Click the action menu ( ) beside the user that you want to remove, then click btn:[Delete].
- Click btn:[Delete] in the warning message to permanently delete the user.