Skip to main content

RBAC (Roles and Permissions)

Bridge provides role-based access control (RBAC) with three built-in roles. The NCP Admin can create custom roles derived from these base roles to grant precisely scoped permissions to users.

Built-in Roles​

RoleScopeDescription
NCP AdminPlatformFull administrative access to the platform
Tenant AdminTenantAdministrative access within a specific tenant
Tenant UserTenantResource utilization access within a specific tenant

Custom Roles​

Custom roles allow the NCP Admin to restrict or extend the permissions of a base role to meet organizational requirements. Once created, a custom role can be assigned to users during account creation.

note

If a custom NCP Admin role includes the User Create permission, users assigned to that role can create other custom roles.

Create a Custom NCP Admin Role​

  1. In the sidebar, click Roles and Permissions.

  2. Ensure the scope is set to Platform.

    Roles and Permissions — Platform scope

  3. Click Create Role.

  4. Enter a Role Name (for example, ncp-admin-custom-role), a Description, and set the Scope to Platform.

    Create Role — details form

  5. Select the required permissions and click Create.

    Create Role — permissions

  6. The new role appears in the Roles and Permissions list. Confirm the scope is Platform and the status is Enabled.

    Custom role created

View Role Details​

Click the ellipsis (⋯) next to the role and select View Details to review the assigned permissions.

View Details — menu

View Details — permissions

Edit Role Permissions​

Click the ellipsis (⋯) and select Edit <role_name> to add or remove permissions.

Edit role — menu

Select or deselect permissions and click Save.

Edit role — add permissions

Edit role — saved

To verify the updated permissions, return to Roles and Permissions and select View Details.

Updated permissions view

Create a Custom Tenant Admin Role​

note

A tenant must exist before you can create a Tenant Admin custom role. See Tenant Creation.

  1. In the sidebar, click Roles and Permissions.

  2. Set the scope to Tenant and select the target tenant from the Select Tenant dropdown.

    Roles and Permissions — Tenant scope

  3. Click Create Role.

    Create Tenant Admin role

  4. Enter a Role Name (for example, tenant-admin-custom-role), a Description, set the Role Type to Tenant Admin, and select the target tenant.

    Tenant Admin role — details form

  5. Select the required permissions and click Create.

    Tenant Admin role — permissions

  6. The new role appears in the list. Confirm the scope is Tenant, the correct tenant is selected, and the status is Enabled.

    Tenant Admin role — created

  7. Click the ellipsis (⋯) and select View Details to review or Edit <role_name> to modify permissions.

    Tenant Admin role — view details

    Tenant Admin role — edit

note

If a custom Tenant Admin role includes the User Create permission, users assigned to that role can create Tenant Admin and Tenant User custom roles.

Create a Custom Tenant User Role​

  1. In the sidebar, click Roles and Permissions.

  2. Set the scope to Tenant and select the target tenant from the Select Tenant dropdown.

    Roles and Permissions — Tenant User scope

  3. Click Create Role.

    Create Tenant User role

  4. Enter a Role Name (for example, tenant-user-custom-role), a Description, set the Role Type to Tenant User, and select the target tenant.

    Tenant User role — details form

  5. Select the required permissions and click Create.

    Tenant User role — permissions

  6. The new role appears in the list. Confirm the scope is Tenant, the correct tenant is selected, and the status is Enabled.

    Tenant User role — created

  7. Click the ellipsis (⋯) and select View Details to review the assigned permissions.

    Tenant User role — view details menu

    Tenant User role — view details

Assign a Custom Role to a User​

Custom roles are assigned to users at creation time. See Create Users for the full procedure. The following steps show role assignment in context.

  1. In the sidebar, click User Management, then click Create User.

    User Management — Create User

  2. Enter the user details and select a custom role from the Role dropdown.

    Create User — form with custom role

  3. Click Create. The user appears in User Management with the assigned role.

    User created with custom role

  4. Log out and log in as the new user to verify access matches the role definition.

    Logout

    Login as custom role user

    Custom role user — dashboard view

Delete a Custom Role​

note
  • To delete an NCP Admin custom role, set the scope to Platform.
  • To delete a Tenant Admin or Tenant User custom role, set the scope to Tenant and select the target tenant.

  1. In the sidebar, click Roles and Permissions and set the appropriate scope.

    Roles and Permissions — delete scope

  2. Click the ellipsis (⋯) next to the role and select Delete role.

    Delete role — menu option

  3. In the confirmation dialog, enter the role name and click Delete.

    Delete role — confirmation dialog

  4. The role is removed from the list.

    Role deleted

Last updated on