Chapter 1. Configuring user access for your local Automation Hub

1.1. About user access

You can manage user access to content and features in Automation Hub by creating groups of users that have specific permissions.

1.1.1. How to implement user access

User access is based on managing permissions to system objects (users, groups, namespaces) rather than by assigning permissions individually to specific users.

You assign permissions to the groups you create. You can then assign users to these groups. This means that each user in a group has the permissions assigned to that group.

Groups created in Automation Hub can range from system administrators responsible for governing internal collections, configuring user access, and repository management to groups with access to organize and upload internally developed content to Automation Hub.

1.1.2. Default user access

When you install Automation hub, the default admin user is created in the Admin group. This group is assigned all permissions in the system.

1.1.3. Getting started

Log in to your local Automation Hub using credentials for the admin user configured during installation.

The following sections describe the workflows associated with organizing your users who will access Automation Hub and providing them with required permissions to reach their goals. See the permissions reference table for a full list and description of all permissions available.

1.2. Creating a new group

You can create and assign permissions to a group in Automation Hub that enables users to access specified features in the system. By default, there is an admins group in Automation Hub that has all permissions assigned and is available on initial login with credentials created when installing Automation Hub.

Prerequisites

  • You have groups permissions and can create and manage group configuration and access in Automation Hub.

Procedure

  1. Log in to your local Automation Hub.
  2. Navigate to menu:User Access[Groups].
  3. Click btn:[Create].
  4. Provide a Name and click btn:[Create].

You can now assign permissions and add users on the new group edit page.

1.3. Assigning permissions to groups

You can assign permissions to groups in Automation Hub that enable users to access specific features in the system. By default, new groups do not have any assigned permissions. You can add permissions upon initial group creation or edit an existing group to add or remove permissions

Prerequisites

  • You have Change group permissions and can edit group permissions in Automation Hub.

Procedure

  1. Log in to your local Automation Hub.
  2. Navigate to menu:User Access[Groups].
  3. Click on a group name.
  4. Select the Permissions tab, then click btn:[Edit].
  5. Click in the field for each permission type and select permissions that appear in the list.
  6. Click btn:[Save] when finished assigning permissions.

The group can now access features in Automation Hub associated the their assigned permissions.

1.4. Creating a new user

You can create a user in Automation Hub and add them to groups that can access features in the system associated by the level of assigned permissions.

Prerequisites

  • You have user permissions and can create users in Automation Hub.

Procedure

  1. Log in to your local Automation Hub.
  2. Navigate to menu:Users[].
  3. Click btn:[Create user].
  4. Provide information in each of the fields. Username and Password are required.
  5. [Optional] Assign the user to a group by clicking in the Groups field and selecting from the list of groups.
  6. Click btn:[Save].

The new user will now appear in the list on the Users page.

1.5. Creating a super user

You can create a super user in automation hub and spread administration work across your team.

Prerequisites

  • You have Super user permissions and can create users in automation hub.

Procedure

  1. Log in to your local automation hub.
  2. Navigate to menu:User Access[].
  3. Click btn:[Users].
  4. Select the user you want to be a super user to see the User details page.
  5. Select Super User under User type.

The user now has Super user permissions.

1.6. Adding users to groups

You can add users to groups when creating a group or manually add users to existing groups. This section describes how to add users to an existing group.

Prerequisites

  • You have groups permissions and can create and manage group configuration and access in Automation Hub.

Procedure

  1. Log in to Automation Hub
  2. Navigate to menu:User Access[Groups].
  3. Click on a Group name.
  4. Navigate to the menu:Users[] tab, then click btn:[Add].
  5. Select users to add from the list and click btn:[Add].

You have now added the users you selected to the group. These users now have permissions to use Automation Hub assigned to the group.

1.7. Creating a new group for content curators

You can create a new group in Automation Hub designed to support content curation in your organization who will contribute internally developed collections for publication in Automation Hub.

In this section you will create a new group and assign the required permissions to help content developers create namespaces and upload their collections to Automation Hub.

Prerequisites

  • You have admin permissions in Automation Hub and create groups.

Procedure

  1. Log in to your local Automation Hub.
  2. Navigate to menu:Groups[] and click btn:[Create].
  3. Enter Content Engineering as a Name for the group in the modal and click btn:[Create]. The new group is created and the Groups page will appear.
  4. On the Permissions tab, click btn:[Edit].
  5. Under Namespaces, add permissions for Add Namespace, Upload to Namespace and Change Namespace.
  6. Click btn:[Save].

    The new group is created with the permissions you assigned. Next you can add users to the group.

  7. Click the Users tab on the Groups page.
  8. Click btn:[Add].
  9. Select users from the modal and click btn:[Add].

Conclusion

You now have a new group who can use Automation Hub to:

  • create a namespace,
  • edit the namespace details and resources page
  • upload internally developed collections to the namespace.

1.8. Automation Hub permissions

Permissions provide a defined set of actions each group performs on a given object. Determine the required level of access for your groups based on the following permissions:

Table 1.1. Permissions Reference Table

ObjectPermissionDescription

namespace

Add namespace

Upload to namespace

Change namespace

Delete namespace

Groups with these permissions can create, upload collections, or delete a namespace.

collections

Modify Ansible repo content

Delete collections

Groups with this permission can move content between repositories using the Approval feature, certify or reject features to move content from the staging to published or rejected repositories, abd delete collections.

users

View user

Delete user

Add user

Change user

Groups with these permissions can manage user configuration and access in automation hub.

groups

View group

Delete group

Add group

Change group

Groups with these permissions can manage group configuration and access in automation hub.

collection remotes

Change collection remote

View collection remote

Groups with these permissions can configure remote repository by navigating to menu:Collections[Repo Management].

containers

Change container namespace permissions

Change containers

Change image tags

Create new containers

Push to existing containers

Delete container repository

Groups with these permissions can manage container repositories in automation hub.

remote registries

Add remote registry

Change remote registry

Delete remote registry

Groups with these permissions can add, change, or delete remote registries added to automation hub.

task management

Change task

Delete task

View all tasks

Groups with these permissions can manage tasks added to Task Management in automation hub.

1.9. Deleting a user from automation hub

When you delete a user account, the name and email of the user are permanently removed from automation hub.

Prerequisites

  • You have user permissions in automation hub.

Procedure

  1. Log in to automation hub.
  2. Expand menu:User Access[].
  3. Click btn:[Users] to display a list of the current users.
  4. Click the action menu ( more actions ) beside the user that you want to remove, then click btn:[Delete].
  5. Click btn:[Delete] in the warning message to permanently delete the user.