Chapter 3. Using consolidated roles for configuring User Access

The Red Hat Hybrid Cloud Console provides three user access roles with ease of use in mind. These roles help simplify how the Organization Administrator creates groups and permissions for various levels of access to the Red Hat Lightspeed services.

The consolidated roles are as follows:

RHEL viewer: The RHEL viewer role provides users visibility without the ability to make changes. It allows read-only access to Red Hat Lightspeed. You can view system configurations, compliance reports, inventory data, patch information, vulnerabilities, and overall resource states and activities. The only action permitted with this role is to generate activation keys.

RHEL operator: The RHEL operator role allows active management of your Red Hat Lightspeed environment. With this role you can edit system configurations, inventory details, policies, and notification/integration settings. The RHEL operator role allows many of the RHEL administrator role functions, but it is restricted from editing compliance policies, content source templates or policies, or tasks. In addition, the RHEL operator role cannot execute remediation plans.

RHEL administrator: The RHEL administrator role provides comprehensive administrative privileges across your RHEL systems and Red Hat Lightspeed. With this role you can manage system configurations, inventory, compliance policies, notifications, patch management, remediations, malware detection, and advisor recommendations. The RHEL administrator role can also view and modify all vulnerability settings.

See Predefined User Access roles, for the roles included in the Default admin access group.

User Access provides a number of predefined roles that you can add to groups. Three of the predefined roles provide permissions to view, operate, and administer the Red Hat Lightspeed services in the Red Hat Hybrid Cloud Console. Doing so requires modifying the Default access group and creating a new group for each one of the view, operate, and administer permissions.

For a list of predefined roles provided by Red Hat, see section Predefined User Access roles.

Predefined User Access roles.

When you complete the following steps, you will have a single RHEL Viewer group that contains a single, comprehensive role that grants all the necessary permissions for the group members. You no longer need to manage a group with multiple individual roles.