- Introduction
- Access control and administration
- Licensing
- Frequently asked questions
IXP overview guide
Apart from the default IXP roles, you can also create and manage custom roles. Adapting custom roles to the specific needs and permissions of users, helps you align more closely with the needs of your organization.
Custom roles are available at tenant level, or project level.
The tenant-level roles can grant the following permissions:
- Authorization / Action: Read
Users can read the actions or permissions when creating a custom role or when viewing a role.
- Authorization / Role: Read, Update,
Create, Delete
Depending on the selected permission, users can view, update, or delete existing roles, as well as create new custom roles.
- Authorization / Role Assignment: Read,
Update, Create, Delete
Depending on the selected permission, users can view, update, or delete existing role assignments. In addition, users can assign roles through the Create permission.
- IXP: Audit Log - Read
Users can view the IXP audit logs.
- Authorization / Role Assignment: Export
role assignment data
Users can extract and download information about role assignments, including which roles are assigned to which identities, such as users, groups, or service accounts.
- IXP: Can perform service-level administration tasks, manage quotas, and create and delete projects.
The project-level roles can grant the following permissions:
- Authorization /
Action: Read
Users can read the actions or permissions when creating a custom role or when viewing a role.
- Authorization / Role:
Read, Update, Create, Delete
Depending on the selected permission, users can view, update, or delete existing roles, as well as create new custom roles.
- Authorization / Role
Assignment: Read, Update, Create, Delete
Depending on the selected permission, users can view, update, or delete existing role assignments. In addition, users can assign roles through the Create permission.
- IXP:
- Alert - Read, Write
- Appliance Configuration - Read, Write
- Bucket - Read, Write
- Bucket Item - Read
- Dashboard - Write
- Dataset - Read, Write
- Integration - Read, Write
- Source - Read
- Stream - Read, Write
- Authorization / Role Assignment: Export role assignment data
- IXP:
- Upload items to raw data buckets.
- Create, update, and delete messages in a source via the API or the UI, including CSV upload.
- Export datasets via the UI.
- Create and delete datasets. Grants all other dataset permissions except dataset export.
- Create, edit, and delete labels, and pin them to messages in the user's datasets.
- Pin and unpin trained models and update their tags.
- Create, modify, and delete sources.
- View any user properties which have been marked as sensitive, in addition to others.
- Fetch and advance the output of a stream.
- Create, modify, and delete streams.
- Go to the Administration page, and select Manage Access.
- Select Service, and then the Roles tab.
- Select Create role, and fill in the
following fields:
- Role name - Give your role a descriptive name.
- Description - Optionally, provide a description.
- Category -
Choose between:
- Tenant - You can assign this role at tenant-level, and consists of tenant-level permissions.
- Project - You can assign this role to existing or new projects and consists of project-level permissions.
- Select Next to proceed to the permissions page.
- In the Standard permissions and Additional permissions tabs, select the permissions to assign to the custom role.
- Select Create.
- Navigate to the Administration page, and select Manage Access.
- Select Service, or a project folder, and then the Roles tab.
- Select the ellipsis for the custom role you want to view.
- Select View.
- Go to the Administration page, and select Manage Access.
- Select Service, or a project folder, and then the Roles tab.
- Select the ellipsis for the custom role you want to edit.
- Select Edit to modify the description and permissions of the custom role.
- After making the changes, select Update.
- Navigate to the Administration page, and select Manage Access.
- Select Service, or a project folder, and then the Roles tab.
- Select the ellipsis for the custom role you want to duplicate.
- Select Duplicate & customize, to create a copy of the role and modify its description and permissions.
- After making the changes, select Create.
- Go to the Administration page, and select Manage Access.
- Select Service, or a project folder, and then the Roles tab.
- Select the ellipsis for the custom role you want to edit.
- Select Delete.
Note: Deleting a custom role also removes all associated role assignments.
