Skip to main content
Version: 2.0

Assign roles to users within a project

Overview of roles assignment to users in CubeCMP​

User roles define which resources a user account can access within a CubeCMP project. By assigning appropriate roles, you control access to cloud resources and enforce resource allocation and compliance policies. CubeCMP uses a role-based access control (RBAC) model that scales efficiently across multiple projects.

Role assignments are configured in User Management by setting a role label on the user account. CubeCMP determines project access based on the value of this label.

Prerequisites​

  • Note down the case-sensitive project name that you want to manage the user permissions for
  • Existing usernames to assign roles to

Role label format​

The role assignment is defined in the user manage with a role label. To assign project roles to users, use the following syntax for the role label.

  • <project-name> should match the exact name of the target project.
  • Use a single hyphen (-) to separate the project name and the assigned role.
  • <role> must be one of the following:
    • admin: Grants full access and control over all project resources.
    • member: Grants access to assigned resources.
info

The ## separator is only necessary when assigning roles to the same user across multiple projects.

To assign a role to a user, refer to the following syntaxes.

<project-name>-<role>

Assign roles to grant access to resources​

warning

Role labels follow these rules:

  • Use the ## prefix for the second and each subsequent project-role entry.
  • The Key and Value fields are case-sensitive. Use the exact casing for project roles, project names, and role values.

  1. Navigate to https://<your-portal-ip>/auth and login with a user with administrative privileges.

  2. Show all existing users.

    Navigate to Manage -> Users, click View all users to show all local authentication users.

    View all users on the CubeCMP portal

  3. Select the user ID of the user to manage roles.

  4. Go to the Attributes tab in the user profile.

  5. Enter ProjectRole in the Key field.

  6. Enter the project and role to be assigned in the Value filed.

    Set user project roles
<project-name>-<role>
  1. Click Add after entering the Key and Value fields.
  2. Click Save to save the changes.

Example configuration​

You can assign a user different roles in multiple projects by combining multiple project-role labels in the same value. Each label explicitly associates the user with a project and role.

PROJ001-admin

Assigns the user as an admin of the PROJ001 project.

You can modify or update these assignments at any time based on project requirements and access control policies.