Manage Custom Roles

Understand Custom Roles

Custom roles give you the ability to provide granular access to users according to a selected list of permissions. If the default user and team roles don’t meet the specific needs of your organization, you can create your own custom roles. Select the permissions you want them to have based on the resources they should have the access to and bundle it together. Just like built-in Sysdig roles, you can assign custom roles to users and teams. Custom roles ensure users have only the permission they need and prevent unwanted access to other resources.

Custom roles operate on concepts similar to role-based access control (RBAC) systems.

Benefits of Using Custom Roles

Custom roles allow you to:

• Give access to a specific set of predefined dashboards to a group of users, who should not be able to view any additional data, nor change or share these dashboards.

• Create a service account for Sysdig Secure that is not tied to a particular user but can be used to automate your Continuous Integration and Continuous Deployment (CI/CD) pipeline.

  • Give a custom set of permissions to the CI/CD account.
  • Give permission to create these accounts to a certain set of users.

• Identify the owner of a particular image so the security issue can be assigned to the team who owns the issue.

• Create a team role that can invite users but not manage the team.

Create a Custom Role

1. Log in to Sysdig Monitor or Sysdig Secure as administrator and select Settings.

2. Select Roles.

3. Click New Role. The New Role page is displayed.

4. Specify the following:

   • Role Name: A unique name to identify the role you create.
   • Role Description: A short explanation of the role that you have created.
   • Product: Choose whether the role is for Secure, Monitor, or both.

5. Select the features and do one of the following:

   • From the drop-down, select one of the following: No Access, Read Only, Full Access, or Custom.
   • Click Customize to grant granular permissions to a sub-set of features. This is an alternative to clicking Custom from the drop-down. See Custom Roles and Privileges for a detailed outline of the options.

6. Click Save.

Assign a Custom Role to Teams

You can set up a custom role as the default user role for teams. To do so:

1. Log in to Sysdig Monitor or Sysdig Secure as administrator and select Settings.

2. Select Teams.

3. Do one of the following:

   • Select the relevant team from the list of teams.
   • Click Add Team.

4. From the Default User Role drop-down, select one of the custom role you have created.

   

5. Complete creating or editing the team as desribed in Manage Teams and Roles.

6. Click Save.

Custom Roles and Privileges

When creating a custom role, you can select Customize to grant granular permissions for each product feature. The following table details the options:

Sysdig Monitor

Sysdig Secure