Role-Based Access for Servers

Role-Based Access for Servers allows administrators to control server visibility and access based on roles.

These are the available roles:

  • Standard Role—Provides access to a static list of servers. You must manually select and add specific servers to the role. If new servers are added to your environment or existing ones are removed, you must manually update the server list in the role configuration.
  • Dynamic Role—Provides access to a dynamic list of servers based on tag-based filtering. Servers are automatically included or excluded from the role based on their assigned tag keys and values. This ensures that any new server matching your defined criteria is automatically granted access without manual intervention.

Configure the Account Setting Properties

You need to configure the account setting properties to use the server roles.

Prerequisites

  • Following table lists the properties you must configured in the Account Settings UI based on your Controller version :
    Release Version Condition Action
    25.7.x or 25.10.x Fresh install or upgrade to 25.7.x or 25.10.x If not configured already, configure the following Account properties:
    • DYNAMIC_ROLE_CREATION_ENABLED=true
    • entity.tagging.enabled=true
    • tag.management.enabled=true
    • tbac.enabled=true
    26.1.x and above Fresh install Configure the following Account properties:
    • DYNAMIC_ROLE_CREATION_ENABLED=true
    • tbac.enabled=true
    26.1.x and above Upgrade to 26.1.x or above If not configured already, configure the following Account properties:
    • DYNAMIC_ROLE_CREATION_ENABLED=true
    • tbac.enabled=true
      Note: Ensure that tag.management.enabled and tbac.enabled are not set to "false".
  • Access Tags must already exist before creating any Roles. See the Access Tags for instructions on creating and managing tags.

To configure the Account property:

  1. Go to <controller_url>/admin.jsp, then click Account Settings.

    A list of accounts displays.

  2. Select an account from the list of options to enable the properties, then click Edit.

  3. Click + Add Property.

    Two blank fields display.

  4. Enter property name and property value in the first and second blank fields.

  5. Select Save. Similarly, add other properties identified for your release version in the Prerequisites section.