QEM: Provide more granular RBAC controls

mclancaster — Fri, 28 Oct 2022 15:15:51 GMT

QEM currently has 4 roles available: viewer, operator, designer, and admin. Our team administers the QEM/QR environment, and data stewards create tasks for data movement needs. At times, a user may need to utilize certain functionality, but the roles provide currently provide an "all or nothing" level of permissions based on the component (server, endpoints, analytics, etc). Having some more granular permissions would help us to better provide least priv. permissions to end users, and better allow self-service.

Ex1: Endpoints

To modify an endpoint, or view internal parameters, you need designer access. This unfortunately allows you to create/delete/modify all endpoints for that QR instance. Having the ability to set permissions like "you can modify passwords and internal parameters, but you cannot make new endpoints or update other fields" would greatly assist from a security perspective.

Ex2: Notifications

You need designer access to create and manage notifications, but this gives you the ability mess with every notification for the environment. We have a shared QEM instance, where multiple business areas need to create their own notifications. Being able to limit actions by a naming convention or other contraint would reduce impacts to other business areas due to a malicious user or accident

From now on, please track this idea from the Ideation por...

Meghann_MacDonald — Wed, 02 Aug 2023 15:57:26 GMT

From now on, please track this idea from the Ideation portal.

Link to new idea

Meghann

NOTE: Upon clicking this link 2 tabs may open - please feel free to close the one with a login page. If you only see 1 tab with the login page, please try clicking this link first: Authenticate me! then try the link above again. Ensure pop-up blocker is off.

Re: QEM: Provide more granular RBAC controls - Status changed to: Closed - Archived

Ideation — Wed, 02 Aug 2023 15:57:28 GMT

idea Re: QEM: Provide more granular RBAC controls - Status changed to: Closed - Archived in Suggest an Idea

QEM: Provide more granular RBAC controls

From now on, please track this idea from the Ideation por...

Re: QEM: Provide more granular RBAC controls - Status changed to: Closed - Archived