Manage roles

Roles are associated with policy and are assigned to users in an organizational unit. A user can perform actions in that organizational unit based on the role assigned to the user and the policies assigned to the role.

Users with the org-admin role can create custom roles and assign them to users.

Create a custom role

Create a role by specifying the role name a role description:

chef-platform-auth-cli authz role create-role --body '{"name": "<ROLE_NAME>", "description": "<ROLE_DESCRIPTION>"}'

By default, this new role has no policies assigned to it. To assign policies to a role, see the documentation on managing policies.