1.3.4. User Access groups, roles, and permissions

User Access uses the following categories to determine the level of user access that an Organization Administrator can grant to the supported Red Hat Hybrid Cloud Console services. The access provided to any authorized user depends on the group that the user belongs to and the roles assigned to that group.

An Organization Administrator adds or deletes roles, users, and service accounts to groups. The group can be a new group created by an Organization Administrator or the group can be an existing group. By creating a group that has one or more specific roles and then adding users to that group, you control how that group and its members interact with Red Hat Hybrid Cloud Console services.

When you add users to a group, they become members of that group. A group member inherits the roles of all other groups they belong to. The user interface lists users in the Members tab.

You can also use workspaces to configure access control to resources. Workspaces provide a way to easily organize systems in your inventory, apply access management rules to those systems, and restrict system access only to users who require it.

You can create and manage workspaces by navigating to RHEL > Inventory > Workspaces, or Identity & Access Management > Workspaces.