Skip to content

Commit

Permalink
Merge pull request #8963 from harness/SSCA-3114
Browse files Browse the repository at this point in the history
SCS: Fixed the Manage-Access-Control-Flow
  • Loading branch information
tejakummarikuntla authored Jan 6, 2025
2 parents 8fb4994 + 9b3de13 commit c26d77c
Show file tree
Hide file tree
Showing 5 changed files with 17 additions and 6 deletions.
23 changes: 17 additions & 6 deletions docs/software-supply-chain-assurance/ssca-access-control.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Harness's RBAC system enables you to precisely manage the user access to specifi

## RBAC for Remediation Tracker

The configuration of RBAC for the Remediation Tracker is possible at three levels: Account, Organization, and Project.
The configuration of RBAC for the Remediation Tracker is possible at three levels: Account, [Organization](/docs/software-supply-chain-assurance/ssca-access-control#organization), and [Project](/docs/software-supply-chain-assurance/ssca-access-control#project).

### Creating and Managing Roles

Expand All @@ -20,14 +20,20 @@ Here's a guide to creating a role or managing permissions for the Remediation Tr


1. Navigate to **Account Settings** > **Access Control** > **Roles** within your Harness Account.


<DocImage path={require('./static/sca-access-control.png')} width="100%" height="80%" title="Click to view full size image" />

2. Add a new role or select an existing one to modify.
3. Within the role, select Supply Chain Security. This action will display the SCS Permissions.


<DocImage path={require('./static/access-control-rbac.png')} width="100%" height="80%" title="Click to view full size image" />


![SCS RBAC](./static/ssca-rbac.png "SCS RBAC")
3. Within the role, select Supply Chain Assurance. This action will display the SCS Permissions.


<DocImage path={require('./static/access-control-permissions.png')} width="100%" height="80%" title="Click to view full size image" />
The Remediation Tracker is governed by the following permissions:


Expand All @@ -36,9 +42,13 @@ The Remediation Tracker is governed by the following permissions:
* **Create/Edit**: Enables users to create new trackers and edit existing ones.
* **Close:** Allows users to close any trackers.

For the Organization level, open the same account settings and proceed to **Organizations**. Choose your organization and under **Organization Level Access Control and Audit Trail**, select **Access Control**. Here, configure the roles and permissions at the organization level in a manner similar to the account level process.

To set roles and permissions at the Project level, navigate to the **Project** section from the module navigation bar, and select **Access Control**. Follow similar steps as above to establish the roles and permissions for the project level.
#### **Organization**:

To configure roles and permissions at the organization level, open the Organization Settings. From the module navigation bar, select your desired organization, then choose **Access Control**. Here, you can configure the roles and permissions at the organization level, following a process similar to the one used at the account level

#### **Project**:
To set roles and permissions at the Project level, open the Project Settings, and select **Access Control**. Follow similar steps as above to establish the roles and permissions for the project level.

### Creating and Managing Resource Groups

Expand All @@ -49,6 +59,7 @@ Here's how you can create and manage resource groups for the remediation tracker
3. Set the "Resource Scope" accordinlgy if you are creating one.
4. Within the Resources, select Supply Chain Assurance.

![Resource groups](./static/resource-groups-remediation-tracker.png "Resource groups")

<DocImage path={require('./static/access-control-remediation.png')} width="100%" height="80%" title="Click to view full size image" />

For configuring at both the organization and project levels, the navigation process is similar to what was detailed in the previous section.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit c26d77c

Please sign in to comment.