Questo contenuto non è disponibile nella lingua selezionata.
Chapter 6. Manage administration roles and users
Keep your OpenShift Dedicated cluster secure and up-to-date by managing administration roles and users effectively.
6.1. Administration roles
As an administrator of an OpenShift Dedicated cluster, you have access to the cluster-admin and dedicated-admin roles. These roles have different permissions and access levels for managing and configuring your cluster.
- The
cluster-adminrole -
As an administrator of an OpenShift Dedicated cluster with Customer Cloud Subscriptions (CCS), you have access to the
cluster-adminrole. The user who created the cluster can add thecluster-adminuser role to an account to have the maximum administrator privileges. These privileges are not automatically assigned to your user account when you create the cluster. While logged in to an account with thecluster-adminrole, users have mostly unrestricted access to control and configure the cluster. There are some configurations that are blocked with webhooks to prevent destabilizing the cluster, or because they are managed in OpenShift Cluster Manager and any in-cluster changes would be overwritten. Usage of thecluster-adminrole is subject to the restrictions listed in your Appendix 4 agreement with Red Hat. As a best practice, limit the number ofcluster-adminusers to as few as possible. - The
dedicated-adminrole -
As an administrator of an OpenShift Dedicated cluster, your account has additional permissions and access to all user-created projects in your organization’s cluster. While logged in to an account with the
dedicated-adminrole, you can use the developer CLI commands (under theoccommand) for increased visibility and management capabilities over objects across projects, while the administrator CLI commands (under theoc admcommand) enable you to complete additional operations.
While your account does have these increased permissions, the actual cluster maintenance and host configuration is still performed by the Red Hat Site Reliability Engineering (SRE) team.
6.2. Manage OpenShift Dedicated administrators
You can manage administrator roles by using the cluster-admin or dedicated-admin group on the cluster. Existing members of this group can edit membership through OpenShift Cluster Manager.
Procedure
- Navigate to the Cluster Details page and select the Access Control tab.
- Select the Cluster Roles and Access tab and click Add user.
- Enter the user name and select your group.
Click Add user.
NoteAdding a user to the
cluster-admingroup can take several minutes to complete.-
Optional: To remove a OpenShift Dedicated administrator, click the Options menu
to the right of the user and group combination and click Delete.
'%20d='M201.5%20305.5c-13.8%200-24.9-11.1-24.9-24.6%200-13.8%2011.1-24.9%2024.9-24.9%2013.6%200%2024.6%2011.1%2024.6%2024.9%200%2013.6-11.1%2024.6-24.6%2024.6zM504%20256c0%20137-111%20248-248%20248S8%20393%208%20256%20119%208%20256%208s248%20111%20248%20248zm-132.3-41.2c-9.4%200-17.7%203.9-23.8%2010-22.4-15.5-52.6-25.5-86.1-26.6l17.4-78.3%2055.4%2012.5c0%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.3%2024.9-24.9s-11.1-24.9-24.9-24.9c-9.7%200-18%205.8-22.1%2013.8l-61.2-13.6c-3-.8-6.1%201.4-6.9%204.4l-19.1%2086.4c-33.2%201.4-63.1%2011.3-85.5%2026.8-6.1-6.4-14.7-10.2-24.1-10.2-34.9%200-46.3%2046.9-14.4%2062.8-1.1%205-1.7%2010.2-1.7%2015.5%200%2052.6%2059.2%2095.2%20132%2095.2%2073.1%200%20132.3-42.6%20132.3-95.2%200-5.3-.6-10.8-1.9-15.8%2031.3-16%2019.8-62.5-14.9-62.5zM302.8%20331c-18.2%2018.2-76.1%2017.9-93.6%200-2.2-2.2-6.1-2.2-8.3%200-2.5%202.5-2.5%206.4%200%208.6%2022.8%2022.8%2087.3%2022.8%20110.2%200%202.5-2.2%202.5-6.1%200-8.6-2.2-2.2-6.1-2.2-8.3%200zm7.7-75c-13.6%200-24.6%2011.1-24.6%2024.9%200%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.1%2024.9-24.6%200-13.8-11-24.9-24.9-24.9z'/%3e%3c/svg%3e){kind=small}