Custom Roles

There are three default roles packaged within each project. You can create your own custom roles for other use cases that require only specific levels of access to Deviceplane. These custom roles can be used to determine the level of access of resources for either members or service accounts.

For each resource type, you can provide access with the default actions (i.e. admin, write, or read). Those actions are an umbrella to individual actions for the resource.

Example Custom Roles

Access to only deploy releases

rules:
- resources:
- 'release'
actions:
- CreateRelease

Access to view and deploy applications

rules:
- resources:
- 'application'
actions:
- read, write

Resource and Action Reference

Besides using the default roles, you may want to create your own custom roles, using the reference table, you would select what resources to provide access to and the action level. For the action, you can either use a parent action (read, write, admin) or an individual action.

ResourceParent ActionIndividual Action
projectreadGetProject
projectadminUpdateProject
DeleteProject
registrationtokenwriteCreateDeviceRegistrationToken
devicereadGetDevice
ListDevices
devicewriteUpdateDevice
DeleteDevice
SSH
devicelabelreadGetDeviceLabel
ListDeviceLabels
devicelabelwriteSetDeviceLabel
DeleteDeviceLabel
applicationreadGetApplication
ListApplications
applicationwriteCreateApplication
UpdateApplication
DeleteApplication
releasereadGetRelease
ListReleases
releasewriteCreateRelease
rolereadGetRole
ListRoles
roleadminCreateRole
UpdateRole
DeleteRole
membershipreadGetMembership
ListMembershipsByProject
membershipadminCreateMembership
DeleteMembership
membershiprolebindingsreadGetMembershipRoleBindings
ListMembershipRoleBindings
membershiprolebindingsadminCreateMembershipRoleBinding
DeleteMembershipRoleBinding
serviceaccountreadGetServiceAccount
ListServiceAccounts
serviceaccountadminCreateServiceAccount
UpdateServiceAccount
DeleteServiceAccount
serviceaccountadminCreateServiceAccount
UpdateServiceAccount
DeleteServiceAccount