Resource Permissions
Resource Permissions apply to designated Resources within ProVision. Rather than allowing a user full access to the ProVision platform, you can choose to limit a user's access to only certain resources or functional areas.
Administration of these permissions require Administrative privileges. As an Admin, the user can then assign resource permissions to groups and users.
Resource Permission Details
Resource Permission groups are visible under the "Groups" section of the Users tab. New groups may be created through the "Add Group" button.
Under the resource selector, chose one or more resources for which you want to define permissions, and then check permissions as desired. Additional Resources may be added to the list by clicking on "Add more Group Permissions".
Here, we show making a group called "Some Lab Group", whose users we want to be able to access two resources: 6connect Labz and 7connect Labs. These users will be working extensively in IPAM and Resources, so we give them full access to those areas of ProVision.
However, we also want them to view DNS information, but not edit it. We click on "Show Details" to fine-tune the permissions, and then check the "R" column under DNS. Lastly, we hit "Save" to save our changes.
Details on each resource permission option is as follows:
| Resource Permission | Description |
|---|---|
| Create | Ability to create records of a certain type |
| Read | Ability to read records of a certain type |
| Update | Ability to update existing records of a certain type |
| Delete | Ability to delete records of a certain type |
| Functional Area | Description |
|---|---|
IPAM | IP Address Management functionality - this covers the IPAM Tab in addition to the IPAM "Gadget" that can be present in Resources. |
| DNS | DNS Zone/Zone Record Management functionality - this covers the DNS Tab in addition to the DNS "Gadget" that can be present in Resources. |
| Peering | Peering functionality - covers the Peering Tab, both the Communication Manager and the Session Manager. |
| Resources | Resource functionality - this controls access for Resources depending on either the TLR or the individual Resource. |
| User | User/Group management - this controls access for User and Group functions within the administrative area for ProVision. |
| SWIP* | This affects the SWIP/RPSL integration for ARIN/RIPE. This way a user can either be enabled to have this capability or not. |
| Admin* | This controls whether a user is a administrator for the global ProVision application. |
*
SWIP and Admin functions are only visible when Show Details is selected