2.5. Restricting service access to a single user

Procedure

1. Navigate to the Red Hat Hybrid Cloud Console > Settings > Identity & Access Management > User Access > Groups. The Groups page is displayed.

2. Remove all roles from the Default access group.

   Because all users in your organization belong to the Default access group, you cannot add or remove single users in Default access to create access control. By removing all roles, users do not inherit role permissions from Default access.

   1. Select the checkbox above the roles list to select all roles in the group.
   2. Click the more options icon (⋮) > Remove.
   3. Click Remove roles to confirm.
3. Save the changes to Default access group. The name changes to Custom default access.

4. Create a new group that contains the users and roles for the allowed access permissions.

   For example, create a group Security Admin that contains the users who will have full access to vulnerability service.

   1. Create a group Security Admin.
   2. Add one or several users to the group from the Members list.

   3. Add the Vulnerability administrator role.

      Each user you add to this group has full access to the vulnerability service.

      注記

      If you want an Organization Administrator to have access, add the Organization Administrator user to the group.