Welcome to this session on IT Users and Roles. In this session, we'd like to
discuss the different types of infrastructure roles that are there by
default and how the role based access control works it has control over
application permissions as well as infrastructure permissions and then
we'll look at how to create infrastructure users so let's go ahead
and get started so when we think about infrastructure
security lifetime will be the tool that's providing the centralized user
management framework that we can use this will allow it to create the IT
users and roles for all of the environments in the infrastructure so
once you've logged in to lifetime you'll see an area called user management where
we'll be able to manage users teams roles different authentication roads and
service accounts in this session we're going to follow focus on the users and
the roles so if we think about setting up an access control policy this is
going to be managed through roles and we can define different permissions for
each environment of the infrastructure so here the different roles that are
built-in by default are developer and administrator and then we might create
some other role like operator when we look at something like the development
role we can see whether or not they have any infrastructure permissions to
actually work with the servers and life time itself and then each of the other
environments so a developer inside of the development environment can reuse
and monitor different applications in quality they can only list them and in
production they have no access where an administrator has infrastructure
permissions to actually manage the servers and the systems themselves as
well as control over each of the different environments so if we wanted
to we could create our own role which we'll use as an example throughout this
session like the operator role and we might be able to
give them some infrastructure permissions and then do something like
the operator can reuse and monitor applications but then can change and
deploy them inside of quality and production so let's look at some of this
in a little more detail so if we have a role to find we can edit that role and
when we go to define the access that the role has what will come up is each of
the different environments so here we can see the development quality and
production environments and this is where the operators settings started
with that we just looked at in the last slide
they had reuse and monitor access and development they had change and deploy
and quality and they had change and deploy and production so when we create
a new role there are a number of different types of access permissions
that can be granted and then however many environments we have all of those
environments will show up and we can choose some level of access to
applications inside of those environments so the application access
permission is no access which means that that particular user won't have any
access to the applications in that environment a listing where they can
just see the information about which applications exists reuse and monitor
where they can actually open debug and reuse the functionality that's there or
they can monitor the functionality that's there but they wouldn't be able
to change things or modify them and then change and deploy this level of access
gives the user permission to reuse and change or create brand-new ones as well
as deploy them inside of that environment and then there's full
control where the user would be able to change deploy and manage any of the
environment settings for that application so that they have full
control over it now there are a different set of
permissions called the infrastructure permissions so life time allows certain
roles to have infrastructure permissions to actually manage users and roles
across the environment and manage teams and applications and this will give them
these types of permissions across all of the environments so here we can see the
operator when we look at its infrastructure permissions they are not
allowed to manage users or roles but they are allowed to manage teams and
those teams application roles so here they've been granted some of the
infrastructure permissions but obviously not all now when we go to create new
users will create those users in lifetime and once we create them in
lifetime those users exist across all of the environments by default a user will
have a role and then we can add application specific permissions as well
as add them to different teams so here you can see we could create a brand new
user our friend Jim Matthews we have to give him a role so we'll give him the
operator role that we've been looking at he'll have a username a password and we
can add some sort of email one thing that's important to note here is that
when we add new users to lifetime these RIT users that can access the
environments and access the applications these are not application end users
application end users would be registered inside of the users
application that's installed as part of the out systems infrastructure or we may
have an external registry of users for the applications so lifetimes users and
those IT users are not the application or end users and when we actually come
in to view a particular user here we can see that Jim Matthews is an operator by
default and then we can see the application roles that he has been
granted so for all of the applications he's only using his default role which
is the operator role here we can see his infrastructure permission to be able to
manage teams and again because he's an operator he gets reused and monitor
change and deploy and and deploy in production so what this
does mean is that inside of all applications he's using his default role
we could also create other types of roles and then grant him access to
certain applications with those other roles we can do that by granting roles
in applications so in this session we've tried to give you a good overview of how
IT users and roles help us manage the different environments inside of our
infrastructure and how users can access those environments so thanks for
watching have a great day