RBAC for config templates and submissions
With role-based access control (RBAC), administrators can determine who can create, read, update, and delete templates and template submissions. This access control helps you securely manage your NGINX configurations and deployments.
- Ensure the user is added as a basic authentication or OpenID Connect (OIDC) user in F5 NGINX Instance Manager.
- Familiarize yourself with the concepts of Roles and Permissions within Instance Manager as they are crucial for managing access.
To complete these steps, you need administrator access.
-
Open your web browser, go to the Fully Qualified Domain Name (FQDN) of your NGINX Management Suite host, and log in.
-
Select Settings (gear icon) in the upper-right corner of the dashboard.
-
Select Users from the left menu to manage individual users or User Groups for managing access at a group level.
-
Define access to templates and template submissions:
-
To ensure proper management of NGINX configurations, create or edit roles to specify access to templates and template submissions. This may involve defining CRUD permissions specific to managing NGINX configurations.
-
Restricting access to templates is essential for controlling who can create and modify templates. This responsibility generally falls to administrators with a comprehensive understanding of NGINX configurations.
-
Restricting access to template submissions limits who can change submitted template inputs. This role could be assigned to application development teams, allowing them to deploy and manage their apps themselves.
-
-
Assign or modify roles:
- For individual users, select a user from the list and click Edit User. For user groups, select a group and click Edit.
- In the Roles list, select the roles you want to assign to the user or user group. Ensure that the roles include permissions for managing templates and/or template submissions.
-
After assigning roles and permissions, select Save to apply the changes.
Download example config templates for NGINX Instance Manager from GitHub