A pre-existing role is a fixed role that you cannot edit, but you can assign it to one or more users. You can add a custom role to suit your or your organization's needs or modify it as desired. When you assign a role to a user, the permissions associated to that role will be automatically given to the user. 

The Roles application allows you to:

  • Create a new role.
  • Open the Role pane where you can:
    • View user role details.
    • Remove role.
    • View users/groups or resources assigned to the role. 
    • Assign users/groups and resources to the role. 
    • Remove users or resources from the role.
    • Add and remove permissions from the role.


The following table describes the UI components of the Roles Application main page in detail.

UI ComponentsDescription
RoleThis row shows a user role's name and description in the TWCloud Admin. Click role row and view the role's details, edit it, or manage the role or resource assignments in the Role pane.

The three dot button contains actions like View role details, Edit role details, Change permissions, Change role assignments, Remove role.

This button creates a new TWCloud user role. See Creating roles for more information. 
Search bar
You can use this search box to find a user role by typing a keyword. TWCloud Admin will run the search and find matching role names. 


Role pane

The Role pane opens after you click a user role, or when you click  and select to Edit role details. Besides allowing you to view, remove, or edit a user role (custom roles only) and its permissions, the Role pane enables you to:

  • Assign roles to a user, a resource, or a user group.
  • Delete a user from the role.
  • See all users assigned to the role. 

The Role pane contains specific information about a role such as the permissions and the assignments and also allows adding assignments to the role.

Note

  • Only a Security Manager can see complete information about each user role on the Role pane.
  • You cannot edit pre-existing roles and their permissions. 

 

Change Role Assignments pane

The following table explains the UI components of the Change  Role Assignments pane after clicking the Change button in the Role pane.

 

UI components
Description
Change
The Change button opens the Change role assignments pane, which contains a list of usernames that you can select and assign to the role. 

Search bar


Allows you to add and search for users and groups.

Edit role assignment.

To remove a user from the current role.

This shows if you are adding internal/external user or group, also user/group name.
ScopeTo allow you to select either:
  • Global scope:
    This scope extends the role permissions on all server-related resources in the TWCloud system.
  • Custom scope:
    The role permissions are limited and are valid only for selected resources. 
Add resource/category

To list all resources in each directory and checkboxes. You can assign a resource to a user by selecting the check box. Depending on your role, you may see only the resources in which you have permissions. Unless you select Custom as the scope of the role, you cannot assign users or resources.

OK
To save changes made to role.
CancelDiscards all changes.

Info

You can assign a role to a user or remove it by using the Role Assignments section in either the Role detail or the User detail page. For more information, see Assigning roles.