https://openobserve.ai/ logo
Join Slack
Powered by
Hey <@U07HJQNGWG1> <@U091EAWHGF2>! I feel we shoul...
# openobserve
a
Hey @Manas (OpenObserve) @Simran(OpenObserve)! I feel we should have a 'read-only' option to create user names for the dev team,in the free version of Enterprise.
@Manas (OpenObserve) Yes correct. We want an option to create 'read-only' user, we currently have only Admin.
Otherwise, the whole idea of having IAM doesn't make much sense.
Anything you would like to mention here ? @Manas (OpenObserve) @Simran(OpenObserve)
m
@Abhishek Anand O2 Enterprise supports Full RBAC with predefined roles like • Admin: Full access to all settings and data, including user management. • Editor: List, get, create, update, and delete access. Cannot manage users. • Viewer: Read-only access. No create, update, or delete permissions. • User: No access. Receives an "Unauthorized Access" warning upon login. Have you configured RBAC properly as detailed here? https://openobserve.ai/docs/user-guide/account-administration/identity-and-access-management/role-based-access-control/#rbac-in-openobserve
a
@Manas (OpenObserve) We are using open source enterprise , RBAC is supported in it?
@Manas (OpenObserve) @Simran(OpenObserve) We tried but we are not getting any option to set it up. Also check a bug reported already by someone : Unable to create system roles (Editor, User, Viewer) from web interface in v0.70.0 · Issue #10891 ·…
m
Their is nothing such as open source enterprise, there is OSS , Professional and Enterprise ( both support RBAC)
If you need RBAC, either use Professional or Enterprise based on your requirements. Also if you want RBAC pre-configured consider using cloud version.
a
@Manas (OpenObserve) What about this bug : https://github.com/openobserve/openobserve/issues/10891 , We want to create users like Admin,Read,View etc only not granular control. We are using OSS.
m
This is not a bug, if you read the comments in the above issue it's clarifies that RBAC is not a OSS feature.
I understand you only want admin, read, view etc not complete IAM .Current implementation complete RBAC and IAM is packaged together and configured with the help of openfga - available in Professional and enterprise. Hope this clarifies
a
ah,okay.thanks! I thnik we should have this bare min feature like other oss platforms provide(grafana)
As per the comments- it was there but removed later
m
Yeah, I have taken a note for this, will get this some light internally if we have more requests team might consider it.
👍 2
a
Lets do a poll reagrding this,I am sure we will get more votes 😄
Open in Slack
PreviousNext
Powered by