Skip to main content

​
Overview

Role-Based Access Control (RBAC) allows administrators to manage user permissions by assigning predefined roles. Each role grants access to specific features and capabilities within the platform, ensuring secure and efficient access management. Users can be assigned one or more roles depending on their responsibilities.
RoleDescriptionKey Capabilities
AnalystProvides access to explore and analyze data within the platform.Access dashboards and analytics; explore datasets and insights; view reports and metrics
Access ManagerResponsible for managing users, groups, and access permissions.Create and manage users; assign roles and group memberships; control access permissions
Connection ManagerManages integrations with external systems including cloud and container environments.Add new connections; configure cloud and container integrations; maintain connection settings
Policy ManagerHandles creation and management of analysis policies.Create and edit policies; manage analysis rules; govern policy enforcement

​
Assigning Roles

​
If using SSO

If you are using Single-Sign-On (refer: SSO Overview), you can map your user groups to specific roles in Kubex. By default, the following user groups are mapped to roles as described above:
  • KUBEX_USER -> Analyst
  • KUBEX_USER_ADMIN -> Access Manager
  • KUBEX_AUDIT_ADMIN -> Connection Manager
  • KUBEX_POLICY_ADMIN -> Policy Manager
You can create these user groups in your identity provider and assign users to them. Once SSO is configured, Kubex will automatically provision users with the appropriate roles. If you need to map existing user groups to Kubex roles, contact support@kubex.ai to request an update to the mapping.

​
If not using SSO

To assign roles to a user:
  1. Navigate to the User Management section.
  2. Edit or create a user and assign the desired role(s) using the checkboxes.
  3. Save the changes to apply permissions.
Users can have multiple roles assigned simultaneously, combining permissions across roles.

​
Best Practices

  • Principle of Least Privilege: Assign only the roles necessary for a user’s responsibilities.
  • Separation of Duties: Avoid assigning conflicting roles to the same user.
  • Regular Audits: Periodically review role assignments to ensure compliance.

​
Summary

RBAC simplifies access control by grouping permissions into roles. By assigning appropriate roles, organizations can ensure users have the right level of access while maintaining security and governance.