- View role details such as description, permissions, and assigned users.
- Create a role.
- Add or remove permissions of a custom role.
- Add or remove users and user groups assigned to a role.
- Add or remove assigned resources for users and user groups with a custom role scope
- Remove a custom role.
Creating and editing roles
- Only users with the Security Manager role can create or modify custom roles.
- It is impossible to edit predefined roles and their permissions.
The following figure displays the Roles application structure.
This figure displays all the components of the Roles application.
As you can see in the above figure, all available roles are listed in the content pane of the Roles application. You can easily identify if a role is predefined or custom by its icon. After selecting a role, the Role pane opens displaying the details of the role such as permissions and assigned users. See the table below for detailed descriptions of the Roles application user interface components.
|User interface component||Description|
|App bar||The app bar is located at the top of the web application portal. You can use it to search for roles by role name and navigate through different TWCloud Admin web applications.|
In the Roles application, the content pane lists all available roles (both predefined and custom) and allows you to access various role-related actions, e.g., view role details or change role assignments. You can also clickon the top right corner of the content pane to sort roles by name.
|This icon next to a role name means that the role is predefined. Such a role comes with the installation and you cannot change its name, description or permissions. To learn more about predefined roles, see Types of roles.|
|This icon next to a role name means that the role is custom. Custom roles are user created roles and can be edited by changing their names, descriptions, and adding or removing permissions.|
Select this icon next to a role to open the menu with role-related actions. The list of available actions depends on the type of a role.
|Click this icon to create a new role.|
|Role pane||The Role is located on the right side of the Roles application portal. It displays information about the selected role. You can use different cards of the pane to view or change role permissions and assignments. To open the Role pane, select a role in the content pane of the Roles application.|
|Role details card||The role details card displays the name and description of the selected role. If the role is custom, you can use this card to change the role name and description or remove the role.|
|Role permissions card||The role permissions card displays the permissions assigned to the selected role. You can also use this card to add or remove permissions of a custom role.|
|Role assignments card||The role assignments card displays the users and user groups assigned to the selected role. You can use this card to assign new users and user groups to the role or remove existing ones. Here, you can also change the role scope for the assigned users and user groups.|