Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SCS: Fixed the Manage-Access-Control-Flow #8963

Merged
merged 3 commits into from
Jan 6, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 17 additions & 6 deletions docs/software-supply-chain-assurance/ssca-access-control.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ Harness's RBAC system enables you to precisely manage the user access to specifi

## RBAC for Remediation Tracker

The configuration of RBAC for the Remediation Tracker is possible at three levels: Account, Organization, and Project.
The configuration of RBAC for the Remediation Tracker is possible at three levels: Account, [Organization](/docs/software-supply-chain-assurance/ssca-access-control#organization), and [Project](/docs/software-supply-chain-assurance/ssca-access-control#project).

### Creating and Managing Roles

Expand All @@ -20,14 +20,20 @@ Here's a guide to creating a role or managing permissions for the Remediation Tr


1. Navigate to **Account Settings** > **Access Control** > **Roles** within your Harness Account.


<DocImage path={require('./static/sca-access-control.png')} width="100%" height="80%" title="Click to view full size image" />

2. Add a new role or select an existing one to modify.
3. Within the role, select Supply Chain Security. This action will display the SCS Permissions.


<DocImage path={require('./static/access-control-rbac.png')} width="100%" height="80%" title="Click to view full size image" />


![SCS RBAC](./static/ssca-rbac.png "SCS RBAC")
3. Within the role, select Supply Chain Assurance. This action will display the SCS Permissions.


<DocImage path={require('./static/access-control-permissions.png')} width="100%" height="80%" title="Click to view full size image" />
The Remediation Tracker is governed by the following permissions:


Expand All @@ -36,9 +42,13 @@ The Remediation Tracker is governed by the following permissions:
* **Create/Edit**: Enables users to create new trackers and edit existing ones.
* **Close:** Allows users to close any trackers.

For the Organization level, open the same account settings and proceed to **Organizations**. Choose your organization and under **Organization Level Access Control and Audit Trail**, select **Access Control**. Here, configure the roles and permissions at the organization level in a manner similar to the account level process.

To set roles and permissions at the Project level, navigate to the **Project** section from the module navigation bar, and select **Access Control**. Follow similar steps as above to establish the roles and permissions for the project level.
#### **Organization**:

To configure roles and permissions at the organization level, open the Organization Settings. From the module navigation bar, select your desired organization, then choose **Access Control**. Here, you can configure the roles and permissions at the organization level, following a process similar to the one used at the account level

#### **Project**:
To set roles and permissions at the Project level, open the Project Settings, and select **Access Control**. Follow similar steps as above to establish the roles and permissions for the project level.

### Creating and Managing Resource Groups

Expand All @@ -49,6 +59,7 @@ Here's how you can create and manage resource groups for the remediation tracker
3. Set the "Resource Scope" accordinlgy if you are creating one.
4. Within the Resources, select Supply Chain Assurance.

![Resource groups](./static/resource-groups-remediation-tracker.png "Resource groups")

<DocImage path={require('./static/access-control-remediation.png')} width="100%" height="80%" title="Click to view full size image" />

For configuring at both the organization and project levels, the navigation process is similar to what was detailed in the previous section.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading