Manage user roles and groups

A user or service account must have an organization role to participate in a Redox organization. To view or participate in its environments, a user or service account must also have an environment role for each one. Learn more about user roles.

You can also create groups to define roles for a set of users or service accounts. This saves you time from having to assign or update roles individually.

• A user must be assigned to an organization owner role to manage organization roles for users. However, a user can be assigned to either an organization owner or admin role to manage organization roles for service accounts.
• A user must be assigned to either an organization owner or admin role to manage environment roles for users and service accounts. Learn more about user roles.

1. Log in to the dashboard.
2. Click your username at the bottom of the navigation menu.
3. From the user menu, select the Access control option.
4. By default, the Users tab opens, which has a list of the organization’s users with their corresponding email address, organization role, and assigned group(s).
5. To view a list of a specific user’s assignments, either:
   1. Click anywhere in user row of the table.
   2. Click the three-dots icon and the Edit roles option from the drop-down menu.
6. The user’s profile opens with all their current organization and environment role assignments.

By default, a user is assigned to a member role in a Redox organization. Change a user’s role in their user profile.

1. Follow the steps to view a user’s roles.
2. Under the Roles section, click the Edit button.
3. From the role drop-down(s), select the organization or environment role(s) you want to assign to this user.

   Multiple role assignments

   A user might have multiple role assignments if they’re both part of a user group and have been assigned an individual role assignment. If they have multiple roles, they have the permissions of all roles assigned to them.

4. (Optional) Click the View permissions option to see what permissions the selected role(s) give a user.
5. Click the Save button. Or click the Cancel button to discard any changes.
6. A confirmation modal opens with the added or removed permissions. Click the Save changes button to proceed.

1. Log in to the dashboard.
2. Click your username at the bottom of the navigation menu.
3. From the user menu, select the Access control option.
4. By default, the Users tab opens. Click the Groups tab.
5. A list of existing groups opens.

1. Click the New group button.
2. Enter the group name. The name must be unique within the Redox organization.
3. Assign organization or environment roles for this group. These aren't required fields, so assign only what you want to assign for all the users or service accounts within the group. For example, you can assign just an organization role or one environment role.

   Can’t grant organization owner

   Keep in mind you can’t grant an organization owner role assignment with groups. You can only assign admin or member organization roles.

4. (Optional) Add any users or service accounts to the group.
5. Click the Create button.

If you need help defining groups, review these possible use cases for your Redox organization.

1. Follow the steps to view groups.
2. Find the group you want to update and click anywhere in its row.
3. Under any section, click the Edit buttons to edit either the group name, roles, or members.
4. Click the Save button.
5. (Optional) Under Identity provider (IdP) groups, click the Manage button to map an IdP group with your Redox groups.
   1. If you haven't configured SSO yet, follow the steps to set up SSO.
   2. To map the IdP groups to Redox groups, scroll down to the Identity provider groups section.
   3. Enter the Groups attribute, which is the attribute your identity provider uses to send group names. Typically, this is groups or memberOf. Leave this field empty if you don’t map any groups.
   4. Click the Add mapping button.
   5. Enter the IdP group name, then select the Redox group to map to. This grants the Redox group roles to the IdP group.
   6. Add any other mappings you need.
   7. Click the Save button.

1. Follow the steps to view groups.
2. Find the group you want to delete and click anywhere the three-dots icon in its row.
3. Click the Delete option.