🚀 KubeSphere 3.2.1 was released on Dec 20, it brought enhancements and better user experience. Read the release notes for 3.2.1 → close
  • English
    • English
    • 简体中文
    1. 1.Experience account: demo1 / Demo1234
    2. 2.This account is only allowed to view parts of UI
    3. 3.It's recommended that install KubeSphere in your environment
  •  Star
  1. Documentation / 
  2. Project Administration / 
  3. Project Role and Member Management

Project Administration

Last updated:
    Edit

    Project Role and Member Management

    This tutorial demonstrates how to manage roles and members in a project. At the project level, you can grant permissions in the following modules to a role:

    • Application Workloads
    • Storage
    • Configurations
    • Monitoring & Alerting
    • Access Control
    • Project Settings

    Prerequisites

    At least one project has been created, such as demo-project. Besides, you need a user of the admin role (for example, project-admin) at the project level. For more information, see Create Workspaces, Projects, Users and Roles.

    Built-in Roles

    In Project Roles, there are three available built-in roles as shown below. Built-in roles are created automatically by KubeSphere when a project is created and they cannot be edited or deleted. You can only view permissions included in a built-in role or assign it to a user.

    Built-in Roles Description
    viewer Project viewer who can view all resources in the project.
    operator Project operator who can manage resources other than users and roles in the project.
    admin Project administrator who has full control over all resources in the project.

    To view the permissions that a role contains:

    1. Log in to the console as project-admin. In Project Roles, click a role (for example, admin) to view the role details.

    2. Click the Authorized Users tab to check users that have been granted the role.

    Create a Project Role

    1. Navigate to Project Roles under Project Settings.

    2. In Project Roles, click Create and set a role name (for example, project-monitor). Click Edit Permissions to continue.

    3. In the pop-up window, permissions are categorized into different Modules. In this example, select Application Workload Viewing in Application Workloads, and Alerting Message Viewing and Alerting Policy Viewing in Monitoring & Alerting. Click OK to finish creating the role.

      Note

      Depends on means the major permission (the one listed after Depends on) needs to be selected first so that the affiliated permission can be assigned.

    4. Newly-created roles will be listed in Project Roles. To edit an existing role, click on the right.

    Invite a New Member

    1. Navigate to Project Members under Project Settings, and click Invite.

    2. Invite a user to the project by clicking on the right of it and assign a role to it.

    3. After you add the user to the project, click OK. In Project Members, you can see the user in the list.

    4. To edit the role of an existing user or remove the user from the project, click on the right and select the corresponding operation.

    Receive the latest news, articles and updates from KubeSphere


    Thanks for the feedback. If you have a specific question about how to use KubeSphere, ask it on Slack. Open an issue in the GitHub repo if you want to report a problem or suggest an improvement.

    Previous : Projects and Multi-cluster Projects
    What’s on this Page