ARTESCA User Management

This section provides information on how to manage two types of ARTESCA users:

  • local users

  • users synchronized from a remote directory using the Lightweight Directory Access Protocol (LDAP)

This management can be done with a Platform Admin role by accessing the Identity top menu in the ARTESCA UI.

Local users are users created and managed within ARTESCA.

Users synchronized from an LDAP directory are users who exist in an external LDAP server that are synchronized with ARTESCA. The user credentials verification is delegated to the AD directory instance.

Admin Roles

You can grant both user types specific privileges based on their roles or groups.

Admin roles can be Interactive Roles, which give human users access to the ARTESCA UI, or Programmatic Roles, which grant API access only and are intended for programmatic integrations.

Note

With no effective role assigned, the user can only access the Grafana monitoring dashboards. Refer to Access Grafana UI for more information.

Interactive Roles

Role

UI Access

Description

Platform Admin

  • Overview

  • Identity

  • Platform

  • Storage Services

  • Alerts

With the Platform Admin role, the user has an overview of the platform’s health and supervises nodes, volumes, and the cluster. This role also lets the user manage users and groups, and view alerts.

Storage Manager

  • Data Management

With the Storage Manager role, the user manages accounts, buckets, workflows, locations, and data services. The Storage Manager can only assume the StorageManager IAM role.

Programmatic Roles

Users assigned one of these roles must log in to the ARTESCA UI at least once before the role can be used programmatically.

Role

UI Access

Description

Storage Usage Reporter

None

With the Storage Usage Reporter role, the user can only read the usage and metrics of the system using the Storage Usage Reporting API.

Platform Reader

None

With the Platform Reader role, the user has read-only access to the platform monitoring APIs (Prometheus, Alertmanager) and to the Kubernetes API (Secrets excluded). The user cannot create, modify, or delete any platform resource.

User and Group Management

This section provides documentation on how to manage local and remote users and groups.

User and Group Configuration

This section provides documentation on how to configure users and groups.