Overview
Access Resolution Flow
User → User Group → Role → Permission Set → Permissions → Effective Access
How It Works
A user is onboarded into Cortx OS through an Identity Provider.
The user is added to one or more User Groups.
Roles are assigned to User Groups.
Each Role is composed of one or more Permission Sets.
Permission Sets contain individual Permissions defining allowed actions.
Cortx OS evaluates all applicable roles and permissions to determine the user’s effective access.
Managing Access
Access changes are made by updating User Groups, Roles, or Permission Sets.
Changes automatically propagate to all affected users.
Direct user role assignments can be used for exceptions.
Access is recalculated dynamically without manual intervention.
Best Practices
Assign access primarily through User Groups, not individual users.
Keep Permission Sets focused and reusable.
Avoid overlapping or conflicting roles.
Review access periodically to enforce least-privilege principles.
Separate identity onboarding from access authorization responsibilities.
Troubleshooting
Resolution: Review:
User Group membership
Assigned Roles
Attached Permission Sets
Included Permissions