RBAC for config templates and submissions
Overview
With role-based access control (RBAC), administrators can determine who can create, read, update, and delete templates and template submissions. This access control helps you securely manage your NGINX configurations and deployments.
Before You Begin
- Ensure the user is added as a basic authentication or OpenID Connect (OIDC) user in F5 NGINX Instance Manager.
- Familiarize yourself with the concepts of Roles and Permissions within Instance Manager as they are crucial for managing access.
Assign Roles for Templates and Template Submissions
To complete these steps, you need administrator access.
-
Open your web browser, go to the Fully Qualified Domain Name (FQDN) of your NGINX Management Suite host, and log in.
-
Select Settings (gear icon) in the upper-right corner of the dashboard.
-
Select Users from the left menu to manage individual users or User Groups for managing access at a group level.
-
Define access to templates and template submissions:
-
To ensure proper management of NGINX configurations, create or edit roles to specify access to templates and template submissions. This may involve defining CRUD permissions specific to managing NGINX configurations.
-
Restricting access to templates is essential for controlling who can create and modify templates. This responsibility generally falls to administrators with a comprehensive understanding of NGINX configurations.
-
Restricting access to template submissions limits who can change submitted template inputs. This role could be assigned to application development teams, allowing them to deploy and manage their apps themselves.
-
-
Assign or modify roles:
- For individual users, select a user from the list and click Edit User. For user groups, select a group and click Edit.
- In the Roles list, select the roles you want to assign to the user or user group. Ensure that the roles include permissions for managing templates and/or template submissions.
-
After assigning roles and permissions, select Save to apply the changes.
Additional Templating Resources
Download example config templates for NGINX Instance Manager from GitHub