How to Use SingleStore Helios RBAC

The sections below outline the steps for using RBAC at the Organization and Workspace group levels.

RBAC can be configured by using the User Management tab in the Cloud Portal

Organization Level

Inviting New Users

  1. Navigate to the Members & Teams tab from the left navigation bar on the Organization page.

  2. Click Add Member.

  3. Enter the new user's email address and then select the default team that this member should be invited to. 

  4. By default, each user is given the Member role.

  5. To change or add additional roles for each user, click the role dropdown menu, then select the teams that the user needs to be part of in the organization.

  6. Click on Add User.

Creating a New Team

  1. Navigate to the Members & Teams tab from the left navigation bar on the Organization page.

  2. Switch to the Teams tab.

  3. Click on Create New Team.

  4. Add the details for Team Name and Team Description.

  5. Select default members in the team.

  6. Click on Create Team to complete the creation.

Updating the Members of Existing Teams

  1. Navigate to the Members & Teams tab from the left navigation bar on the Organization page.

  2. Switch to the Teams tab.

  3. Click on the three dots (...) in the Action column and select View Team. Alternatively, you can directly click on the Team Name in the first column.

    • Click on Edit Team on the top right.

    • Add or remove existing members of the team as required.

    • Click Update Team to save changes.

Workspace Group Level

Inviting New Users

  1. Select the workspace group that you want to invite the user to.

  2. Click on the User Management tab on top. 

  3. Click on Add Users.

  4. In the Add Member to Workspace group name, fill in the details.

  5. Add member - select user or TeamRole - This applies to the workspace group level roles that need to be added.

  6. Click on Add Members to save the changes.

  7. You will be able to see the member or team added.

Updating Members in an Existing Workspace Group

  1. Select the workspace group that you want.

  2. Click on the User Management tab on top. 

  3. Click on the three dots (...) in the Action column and then select Edit Roles - to change the role of the user or  Revoke all Roles - to remove the user access to the workspace group completely.

  4. In the Edit Roles tab, change the role for the user. 

  5. Click Update to save the changes.

Enabling RBAC for New and Existing Organizations

RBAC is enabled for all Organizations.

Pre-defined teams are created and granted common roles when RBAC is enabled. These teams include Organization Owners, Organization Billing Administrators, Organization User Administrators, Organization Operators, Organization Writers, and Organization Readers.

For new organizations, the initial users will be added to the Organization Owners team, which grants full access to all user actions. For existing organizations, users will be added to the Organization Owners teams, allowing those users continued access to any user actions. Any user in the Organization Owners team can reassign other users in the team to different teams to limit their access.

New users can be invited to join any team(s). Inviting a new user to join the Organization Owners team immediately grants them access to all resources in the organization. Inviting a new user without specifying a team adds them to the default members team, which makes them a member of the organization, but grants no specific access beyond the ability to login to the portal and navigate to the options available.

When users are added to an organization or a workspace group, synchronization takes place in the engine and they are added to the corresponding user groups in the backend.

Last modified: February 28, 2024

Was this article helpful?