Configure a Model RBAC Group

You can configure groups in the interface using a groups wizard, or by loading a JSON file that defines the permissions or that you can edit in place. (For example, you could use the templates listed above, alter them as needed to specify prefixes or role changes.) There are also group API endpoints discussed in the knowledge center.

The following steps describe the user interface methods to load a JSON file and edit it in the interfaces, or to load a JSON file that was already prepared with changes for the customer.

To load and edit a JSON RBAC template:

1. Log in to ChaosSearch as the tenant account user.
2. In the top right corner, click the user's name and select Accounts.
3. Click Groups.
4. In the top right corner, click Add Group.
5. In the pop-up, specify the name of the group. If you are assigning groups in the IdP system, this name must exactly match the name used in the identity provider.
6. Click Wizard.
7. Click Edit as JSON. (Note that you might have to add an empty block for the Edit as JSON button to become active.)
8. Copy and paste the desired JSON document template into the text window.
9. Edit the JSON document as needed, specifying any appropriate prefixes and bucket names for the group. For more information, see Modifying the Group Bucket and Prefix Settings.
10. Click Save.
11. Click Finish.
12. Click Save. The new group is added to the list on the left.

To upload a completed permissions JSON file:

1. Open a new text document in the editor of your choice.
2. Copy and paste the desired accompanying template into the editor.
3. Edit the JSON document to include the appropriate prefixes and bucket names for this IdP group. For more information, see Modifying the Group Bucket and Prefix Settings.
4. Save and close the text document.
5. Login as the tenant account user.
6. In the top right corner, click the user's name and select Accounts.
7. Click Groups.
8. In the top right corner, click Add Group.
9. In the pop-up, specify the name of the group. If you are assigning groups in the IdP system, this name must exactly match the name used in the identity provider.
10. Click the arrow icon for Drop Permissions file* here.
11. Find and select the file saved in step 3 to load it.
12. Click Save. The new group is added to the list on the left.