Role Based Access Controls

[johnsonhays]

All users can modify all/any rotations, schedules, escalation policies, and services . Would like to control who has the ability to make changes and generate notifications.

Have RBAC based on these use cases.

GoAlert Admin -

• Can have access to goalert functionality.

Service Based Admin -

• Can create/edit rotations, schedules, escalation policies, and services. Able to add users to rotations, schedules, and escalation policies.
• Can grant users to Service and all rotations, schedules, and escalation policies associated with the Service.
• Can generate integration keys, but Service Based Admin only allowed to see them.

Service Based User -

• Can override schedules. Has read access to all rotations, schedules, and escalation policies for his service. Can generate an alert for his service.

Operators -

• Can only generate alerts for granted services.

Users/Operators -

• Can have access to multiple services if granted.

An alternative would be to allow some users the ability to only generate alerts and modify their profile.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity.