Vault: Assigning Role to Groups

JumpCloud Vault allows administrators to assign platform roles to user groups. When a role is assigned to a group, all current and future members of that group automatically inherit the permissions associated with that role thereby eliminating the need to configure access on a per-user basis. This feature simplifies access management at scale, supports least-privilege enforcement, and speeds up onboarding and off-boarding workflows.

Prerequisites

• You are logged in as an Admin or a user with permissions to manage Groups and Roles.
• The target group already exists. If not, create it. See Groups for more information.
• The role you want to assign is already configured in Roles under Administration.

Assigning Roles

To assign a role to a group, do the following:

1. Log in to the Vault platform.
2. Go to Administration > Groups. The Groups list is displayed.
3. Select a group and go to Roles tab. This displays all roles currently assigned to the group.
4. Click +Add Role. The Select Roles modal window is displayed.
5. On this window, search and select the required role names and then click Save. The recently added roles are added to the list.

Viewing Assigned Roles

To view which roles a user has — including those inherited through group membership:

1. Log in to the Vault platform.
2. Go to Administration > Users. The Users list is displayed.
3. Search and select a user. The Edit User modal window is displayed.
4. On the modal window, go to Roles tab. The User Roles modal window with all active roles are displayed. Roles inherited via group membership are labeled Inherited from Group.
5. Select the desired user roles and click Save.