Manage Groups

Security Requirements and Controls

Assigning permissions to individual users in larger organizations can be a cumbersome task. LogScale allows you to create groups and either manage user memberships directly in LogScale or by synchronizing with an external system.

Either way you need to create groups in LogScale first.

Then you need your group to have users and permissions assigned to it. Any user who is assigned the Change user access permission can assign permissions to groups for a repository.

Note

You need to be a root user or have the Manage Users on self-hosted installations to create groups and assign them users and permissions.

Note

If you intend to administer access to repositories and views centrally by an organization owner or root only, be sure not to grant the Change user access permission to anyone. In practice, this means removing the permission from all roles thus not allowing any users to go to a repository or view and add another user or group directly.

Create New Groups

  1. Click on the profile menu icon and select Organization Settings then Users and permissions → Groups.

  2. Click +Add... to create a new group.

  3. Enter a group name, such as "Operations", and select the permission levels to apply to the new group. (See all types described at Permission Levels.) Then click Next:

    Create Groups

    Figure 70. Create Groups


  4. For the Repository and view level, choose whether the group should apply a role to a selection of repositories and views or to all current and future repositories and views. Select the preferred repositories or views and click Next.

  5. Select a role for the new group, for example, Admin, then click Create group. You now have an empty group with no users assigned but the Admin role is given to all the selected repositories or views:

    New Group Created

    Figure 71. New Group Created


    Afterwards, the added users are in the Users list.

  6. If you have a few repositories that need to be treated differently, click Exceptions to apply different permissions to selected repositories.

Note

Only users who have accepted the email invitation and completed the first log-in process can be added to a group.

Change Roles

You can modify the role assigned to a group — that is, its set of permissions — at your convenience.

  1. Go to Users and permissions → Groups and select your group from the list of available groups. You can search if the one you are looking for is not immediately visible in the list, or filter by type.

  2. Click the Permissions tab of the selected group and click Change role.

    Change Permissions to Groups

    Figure 75. Change Permissions to Groups


  3. In the pop-up dialog, click Apply role to update the default role for the entire group.

    Apply Roles to Groups

    Figure 76. Apply Roles to Groups