Users
The Users page (/admin/users) manages the local accounts and their roles, global or per cluster. It needs
users:read; changes need users:manage.
Actions
| Button | Effect | Permission |
|---|---|---|
| New user | creates an account with a password to change at the first sign in | users:manage |
| Edit and roles | display name, Disabled, Add role (global or for one cluster), Remove role | users:manage |
| Reset password | sets a New password | users:manage |
| Unlock | unlocks an account Locked after failed sign ins | users:manage |
| Reset two-factor | the user enrolls a new authenticator at the next sign in | users:manage |
| Delete | the account and its role bindings are deleted; audit events are kept | users:manage |
Typical tasks
- Give an operator access to one cluster. New user, then Edit and roles > Add role
operatoron that cluster.
The roles are described in Roles.