Configure Role-Based Access Control

Applicable to both Classic and Federated modes

The following topics help you understand user management, how to access it, how to create and manage roles, and how to map roles and share Portworx Backup resources with users and groups.

Here is the order of tasks to perform in the user management module of Portworx Backup:

• Integrate authorization providers in Keycloak
• Create local users and groups in Keycloak
• Create roles in Portworx Backup web console
• Map roles in Portworx Backup web console to the:
  • Users
  • Groups

note

The Create local users and groups in Keycloak step is only required if you are managing users locally in Keycloak. If you are federating to an external identity provider (such as Active Directory, OpenLDAP, or Auth0) in Step 1, skip this step as the users and groups are managed in the external IdP.

The following topics explain how to use Portworx Backup user management, in the order you typically perform them:

• Introduction to User Management — Learn about User Management and its uses for your enterprise.
• Access User Management — This section provides guidance on accessing and managing user roles and groups in Portworx Backup. Learn how to view, assign, and manage permissions for individual users and groups within your enterprise.
• Create Local Users and Groups — Create and manage users and user groups using Portworx Backup with Keycloak
• Create and Manage Roles — Create and manage roles in User Management.
• Map Roles — Map roles to Portworx Backup users and user groups.
• Configure Super Admin Access — The super admin role in Portworx Backup provides full control over Portworx Backup resources, including clusters, namespaces, cloud accounts, and backup schedules.
• Revoke User Access — Explains how to revoke access for Portworx Backup roles