docs(OPCP): update rights matrix in 3.0.6#371
Open
thibaultbustarret-ovhcloud wants to merge 3 commits into
Open
docs(OPCP): update rights matrix in 3.0.6#371thibaultbustarret-ovhcloud wants to merge 3 commits into
thibaultbustarret-ovhcloud wants to merge 3 commits into
Conversation
Update rights matrix to reflect changes in 3.0.5 and 3.0.6 Signed-off-by: thibaultbustarret-ovhcloud <164886722+thibaultbustarret-ovhcloud@users.noreply.github.com>
Signed-off-by: thibaultbustarret-ovhcloud <164886722+thibaultbustarret-ovhcloud@users.noreply.github.com>
fthiery
requested changes
Jul 10, 2026
|
|
||
| - View your own account settings in Keycloak | ||
| - Access **Netbox** in read-only mode (network inventory) | ||
| - Access **Prometheus** in read-only mode |
Collaborator
There was a problem hiding this comment.
I thought we did not show prometheus access (no button) ?
| - Access **Netbox** in read-only mode (network inventory) | ||
| - Access **Prometheus** in read-only mode | ||
| - Access the **Dashboard** and its iframes (Grafana, Netbox, Prometheus, OpenStack) | ||
| - Access the **Dashboard** |
Collaborator
There was a problem hiding this comment.
Not sure this is relevant: netbox, grafana etc ARE the dashboard
|
|
||
| - Access **Grafana** in edit mode (modify dashboards) | ||
| - Access **Grafana** in read-only mode | ||
| - Access **Netbox** as an operator (create and modify network resources) |
Collaborator
There was a problem hiding this comment.
I think datacenter operator should only be allowed to write entries in the action journal, not modify it
… customer Signed-off-by: thibaultbustarret-ovhcloud <164886722+thibaultbustarret-ovhcloud@users.noreply.github.com>
Y0Coss
added
the
Private Cloud
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Update rights matrix to reflect changes in 3.0.5 and 3.0.6. Here is the changelog for both versions :
3.0.5
netbox.readanddashboard.netbox.viewfromreaderas netbox rights shouldn't be given by defaultdashboard.grafana.viewfromreaderuser as he isn't supposed to be able to access grafana3.0.6
grafana.*roles; users without one are denied. Previously, any user allowed on the admin dashboard had full administrator rights on Grafana. A newgrafana_client_secretentry must be added to thepasswordssecret before upgrading (see upgrade notes).grafana.viewgrants Viewer,grafana.operategrants Editor andgrafana.admingrants Admin. Roles are re-evaluated at every login and are granted through the existing composites (dc_operator→ view,it_admin→ operate,master_admin→ admin).