Gateway & identity
Users and roles
Invite operators and assign RBAC permissions.
Goal
Manage console users with least-privilege roles.
Prerequisites
users.read/users.write(or platform admin).
Steps
- Open Ops → Users.
- Create a user in the current tenant.
- Assign a role with the permissions they need (hosts, policies, config, etc.).
- Have them sign in with the tenant slug.
Permission mindset
Permissions are codes such as policies.read, config.write, proxy.hosts.write. The sidebar hides areas the user cannot read.
Verify
- New user can sign in.
- Unauthorized sections are hidden or return forbidden from the API.