Console user guide

This guide describes every area of the Navin Manager console: what each screen shows, its buttons and actions, the permissions it needs and the typical tasks step by step. The menu shows only the entries your permissions open; buttons that need a permission you do not have are hidden or disabled.

Areas

Area	Path	Permission to open it	Page
Dashboard	/	cluster:read	Dashboard
Clusters	/clusters	cluster:read or clusters:create	Clusters
Hosts	/hosts	cluster:read	Hosts
Services	/services	cluster:read	Services
Kubernetes	/kubernetes	cluster:read (Kubernetes clusters only)	Kubernetes
MCP runtime	/mcp-runtime	cluster:read	MCP runtime
Operations	/operations	operations:read	Operations
Alerts	/alerts	alerts:read	Alerts
Backup and DR	/backup	backup:read	Backup and DR
Infrastructure operations	/infra-ops	cluster:read	Infrastructure operations
Lifecycle	/lifecycle	cluster:read	Lifecycle
Network flows	/network	cluster:read	Network flows
Users	/admin/users	users:read	Users
Roles	/admin/roles	users:read	Roles
Authentication	/admin/authentication	auth:manage	Authentication
Audit	/admin/audit	audit:read	Audit
Settings	/admin/settings	settings:manage	Settings
Mirror	/admin/mirror	settings:manage	Mirror
Navin Trusted Hub	/admin/hub	system:read	Navin Trusted Hub
Certificates	/admin/certificates	pki:manage or cluster:read	Certificates
Vault	/admin/vault	vault:manage	Vault
Navin SM	/admin/navin-sm	settings:manage	Navin SM
MCP servers	/mcp	mcp:read	MCP servers
System	/system	system:read	System
Profile	/profile	signed in	Profile

Roles and permissions

The built in roles (navin_manager/security/rbac.py). A role bound to a cluster grants only the permissions that are not global; admin, security_admin and auditor are bound globally only.

Role	Permissions
admin (Administrator)	every permission
security_admin (Security administrator)	users:read, users:manage, auth:manage, audit:read, pki:manage, system:read
cluster_admin (Cluster administrator)	cluster:read, cluster:manage, hosts:manage, services:install, services:operate, configs:read, configs:edit, operations:read, operations:abort, alerts:read, alerts:manage, connections:read, system:read, mcp:read, mcp:manage
operator (Operator)	cluster:read, services:operate, configs:read, operations:read, operations:abort, alerts:read, alerts:manage, system:read, mcp:read
viewer (Viewer)	cluster:read, configs:read, operations:read, alerts:read
auditor (Auditor)	audit:read, cluster:read, operations:read

Common elements

• Cluster selector: the pages of a cluster (dashboard, hosts, services, operations and the others) show the selected cluster.
• Command palette: search a page, a service, a host or an operation by name; it matches labels and keywords in English and French.
• Language: English or French, kept in the cookie nm_lang.
• Every change is recorded in the audit journal, every long action is an operation.

Documentation and vault in the top bar

The top bar of the console holds two buttons next to the running operations and the alerts:

• Documentation opens the documentation site in a new tab: /docs/ when the console is in French, /docs/en/ when it is in English. The site is served by the console itself (setting docs_dir) and is readable without sign in: it holds no secret.
• Vault opens the IT vault (/admin/vault, see Vault). The button is shown only to accounts with the vault:manage permission, like the entry of the side menu.