Manage Custom Roles

Prerequisites

Custom roles are supported in:

• Sysdig SaaS
• Sysdig On-Prem version 6.0 or later.

Understand Custom Roles

Custom roles let you grant granular access to users based on a selected set of permissions. If the default user and team roles don’t meet your organization’s needs, you can create your own custom roles.

Custom roles let you:

• Select the permissions you want users to have based on their access to resources.
• Restrict access of users to only the necessary resources.
• Assign roles to users and teams, like built-in Sysdig roles.

Custom roles follow principles similar to role-based access control (RBAC) systems.

Benefits of Using Custom Roles

Custom roles allow you to:

• Give access to a specific set of predefined dashboards, while restricting users from modifying or sharing the dashboards, or viewing any additional data.

• Create service accounts for Sysdig Secure that are not tied to a particular user, for use in automating your Continuous Integration and Continuous Deployment (CI/CD) pipeline.

  • Give a custom set of permissions to the CI/CD account.
  • Give permission to create these accounts to a certain set of users.

• Identify the owner of a particular image so the security issue can be assigned to the team who owns the issue.

• Create a team role that can invite users but not manage the team.

Create a Custom Role

1. Log in to Sysdig Monitor or Sysdig Secure as administrator.

2. Select Settings > Access & Secrets > Roles.

3. Click New Role. The New Role page is displayed.

   

4. Specify the following:

   • Role Name: A unique name to identify the role you create.
   • Role Description: A short explanation of the role that you have created.
   • Product: Choose whether the role is for Secure, Monitor, or both.

5. Select the features and do one of the following:

   • From the drop-down, select one of the following: No Access, Read Only, Full Access, or Custom.
   • Click Customize to grant granular permissions to a sub-set of features. This is an alternative to clicking Custom from the drop-down. See Custom Roles and Privileges for a detailed outline of the options.

6. Click Save to create the role.

Assign a Custom Role to Teams

You can set up a custom role as the default user role for teams. To do so:

1. Log in to Sysdig Monitor or Sysdig Secure as administrator and select Admin.

2. Select Teams.

3. Do one of the following:

   • Select the relevant team from the list of teams.
   • Click Add Team.

4. From the Default User Role drop-down, select one of the custom role you have created.

   

5. Complete creating or editing the team as described in Manage Teams and Roles.

6. Click Save.

Custom Roles and Privileges

When creating a custom role, you can select Customize to grant granular permissions for each product feature. The following table details the options:

Sysdig Monitor

Sysdig Secure