mirror of
https://github.com/goauthentik/authentik
synced 2026-04-27 09:57:31 +02:00
6ed5cb5249
* website/integrations: rename "Create with Provider" to "New Application" The application list page now uses a split-button labeled "New Application" instead of the old "Create with Provider" dropdown. Update all 113 integration guides to match. * website/docs: update flow, stage, and policy button labels - "Create" → "New Flow", "New Stage", "New Policy" for trigger buttons - "Finish" → "Create Flow", "Create Stage", "Create Policy" for submit - "Create and bind stage" → "New Stage" / "Bind Existing Stage" - "Create" (binding submit) → "Create Stage Binding" * website/docs: update provider button labels - "Create" → "New Provider" for trigger buttons - "Create with Provider" → "New Application" in RAC docs - "Create" → "New Property Mapping", "New RAC Endpoint", "New Prompt" for related entity creation * website/docs: update directory button labels - "Create" → "New Source" for federation/social login pages - "Create" → "New Role", submit → "Create Role" - "Create" → "New Invitation" - Policy binding submit → "Create Policy Binding" * website/docs: update endpoint device and system management button labels - "Create" → "New Endpoint Connector", "New Enrollment Token", "New Device Access Group", "New Flow" - Submit → "Create Device Access Group" - "Create" → "New Notification Rule", "New Notification Transport" - Binding submit → "Create Policy Binding" * Reorganize policy documentation * website/docs: address policy docs review feedback * post-rebase * website/docs: Reorganize policy documentation -- Revisions (#21601) * apply suggestions * Fix escaped. * Fix whitespace. * Update button label. * Fix phrasing. * Fix phrasing. * Clean up stragglers. * Format. --------- Co-authored-by: Dominic R <dominic@sdko.org>
47 lines
2.4 KiB
Markdown
47 lines
2.4 KiB
Markdown
---
|
|
title: "Manage roles"
|
|
description: "Learn how to work with roles and permissions in authentik."
|
|
---
|
|
|
|
Roles are a collection of permissions, which can then be assigned, en masse, to a user or a group. Using roles is a way to quickly grant permissions; by adding a user to a group with the appropriate assigned roles, any user in that group then inherits all of those permissions that are assigned to the role.
|
|
|
|
:::info
|
|
Roles are intended to be assigned to groups, not to individual users. However, in some cases it's practical to assign a role straight to a user, so authentik implements that functionality.
|
|
:::
|
|
|
|
## Create a role
|
|
|
|
To create a new role, follow these steps:
|
|
|
|
1. In the Admin interface, navigate to **Directory > Roles**.
|
|
2. Click **New Role**, enter the name of the role, and then click **Create Role** to save.
|
|
3. Next, [assign permissions for the role](../access-control/manage_permissions.md#assign-or-remove-permissions-for-a-specific-role).
|
|
|
|
## Modify a role
|
|
|
|
To modify a role, follow these steps:
|
|
|
|
- To edit the name of the role, click the Edit icon beside the role's name.
|
|
|
|
- To modify the permissions that are assigned for the role, click the role's name to go to the role's detail page. There you can add or remove permissions. For more information, refer to ["Assign or remove permissions for a specific role"](../access-control/manage_permissions.md#assign-or-remove-permissions-for-a-specific-role).
|
|
|
|
## Delete a role
|
|
|
|
To delete a role, follow these steps:
|
|
|
|
1. In the Admin interface, navigate to **Directory > Roles**.
|
|
2. Select the checkbox beside the name of the role that you want to delete.
|
|
3. Click **Delete**.
|
|
|
|
## Assign a role to a group
|
|
|
|
1. To assign the role to a group, navigate to **Directory > Groups**.
|
|
2. Click the name of the group to which you want to add a role.
|
|
3. On the group's detail page, on the Overview tab, click **Edit** in the **Group Info** area.
|
|
4. On the **Update Group** box, in the **Roles** field, select the roles you want to assign to the group from the list of **Available Roles** in the left box (you can select multiple roles at once by holding the Shift key while selecting the roles), and then click the appropriate arrow icon to move them into the **Selected Roles** box.
|
|
5. Click **Update** to add the role(s) and close the box.
|
|
|
|
## Assign a role to a user
|
|
|
|
See [add user to a role](../user/user_basic_operations.md#add-a-user-to-a-role).
|