Roles

Reference page for Servoy Cloud Application Roles

Overview

Servoy Cloud uses Role-based access control, which refers to the idea of assigning permissions to users based on their role within an application. A role is basically a collection of permissions that you can apply to users from any application within the namespace.

Unlike permissions, roles are defined on namespace level. They make it easier to add, remove, and adjust permissions than assigning permissions to users individually.

When planning your access control strategy, it's best practice to assign users the fewest number of permissions that allow them to get their work done.

Manage Role

Create Role

Role names should be unique within a namespace

To create a Role for ServoyCloud Applications:

1. Navigate using the menu to User Management-> Roles

2. Click on the button Create Role to prompt a dialog

3. Define the role details

4. Save and be automatically redirected to Role Details page

Create Role for ServoyCloud Application in Cloud Control Center

You have successfully created a Role for ServoyCloud Applications and can proceed with adding permissions and users to it.

Edit Role

To edit Role details/settings:

1. Navigate to Roles using the menu to User Management -> Roles

2. Navigate to Role Details using the context menu of the chosen role
3. Click the Settings tab

4. Edit details

5. Save

You have successfully edited role details/settings.

Delete Role

Deleting a Role defined for ServoyCloud Applications is permanent. Associated permissions will not be deleted, however users who have this role will lose access to these permissions.

To delete a Role from a ServoyCloud Application:

1. Navigate to using the menu to User Management -> Roles

2. Click the context menu of the chosen role
3. Click Delete Role

4. Confirm intent to delete ServoyCloud Application Role

You have successfully deleted a Role defined for ServoyCloud Applications and it has been automatically removed from all the users it was assigned to.

Manage Role Permissions

Add Permission

To add a permission (any type) to a role defined for ServoyCloud Applications:

1. Navigate using the menu to User Management -> Roles

2. Navigate to Role Details using the context menu of the chosen role
3. Click the Permissions tab

4. Add permissions using the button Add Permissions

   1. If no permissions have been defined, see Security

5. Select desired permissions from existing applications

6. Add permissions

You have successfully added a permission to a role defined for ServoyCloud Applications. Users who have this role will receive all permissions assigned to that role.

Add permissions to Role defined for ServoyCloud Applications

Remove Permission

To remove a permission from a role defined for ServoyCloud Applications:

1. Navigate using the menu to User Management -> Roles

2. Navigate to Role Details using the context menu of the chosen role
3. Click the Permissions tab

4. Click on the remove icon of the chosen permission
5. Confirm intent to remove permission and revoke it from all users with this role

You have successfully removed a permission from a role defined for ServoyCloud Applications and it has been automatically revoked from all users which had this role.

Remove permission from Role defined for ServoyCloud Applications

Manage Role Users

Assign User to Role

If a user has several role assignments, the user permissions are the union of all role permissions.

To assign Roles to Users or add users to Role:

1. Navigate using the menu to User Management -> Roles

2. Navigate to Role Details using the context menu of the chosen role
3. Click the Users tab

4. Add users using the button Add Users

   1. If no users have been created, see Users

5. Select the users to which the role should be assigned

6. Assign role

You have successfully assigned a user to a role group defined for ServoyCloud Applications. The user will now have all the permissions associated with this role.

Assign Role to Users defined for ServoyCloud Applications

Remove User from Role

To remove a user from a role group:

1. Navigate using the menu to User Management -> Roles

2. Navigate to Role Details using the context menu of the chosen role
3. Click the Users tab

4. Click on the remove icon of the chosen user
5. Confirm intent to remove user from role group and revoke all associated permissions

You have successfully removed a user from a role group defined for ServoyCloud Applications and automatically revoked all associated permissions.

Remove User defined for ServoyCloud Applications from Role group