Role-Based Access for Servers

Role-Based Access for Servers allows administrators to control server visibility and access based on roles.

These are the available roles:

Configure the Account Setting Properties

You need to configure the account setting properties to use the server roles.

Prerequisites

  • The following properties must be configured in the Account Settings UI:
    Release Version Condition Action
    25.7.x or 25.10.x Fresh install or upgrade to 25.7.x or 25.10.x If not configured already, configure the following Account properties:
    • DYNAMIC_ROLE_CREATION_ENABLED=true
    • entity.tagging.enabled=true
    • tag.management.enabled=true
    • tbac.enabled=true
    26.1.x and above Fresh install Configure the following Account properties:
    • DYNAMIC_ROLE_CREATION_ENABLED=true
    • tbac.enabled=true
    26.1.x and above Upgrade to 26.1.x or above If not configured already, configure the following Account properties:
    • DYNAMIC_ROLE_CREATION_ENABLED=true
    • tbac.enabled=true
      Note: Ensure that tag.management.enabled and tbac.enabled are not set to "false".
  • Access Tags must already exist before creating Dynamic Roles. See the Allowed Tags for instructions on creating and managing tags.

To configure the Account property:

  1. Go to <controller_url>/admin.jsp, then click Account Settings.

    A list of accounts displays.

  2. Select an account from the list of options to enable the properties, then click Edit.

  3. Click + Add Property.

    Two blank fields display.

  4. Enter property name and property value in the first and second blank fields.

  5. Select Save. Similarly, add other properties identified for your release version in the Prerequisites section.