Skip to content

Manage User Groups

This feature in the Administration section of the Kelvin UI is the management of the Groups in the Attribute Based Access Control.

A Group is a collection of Roles. Roles are a collection of Policies.

The name of the Group must match the name of the group in Keycloak or your SSO for these Roles and Policies to function properly.

Warning

This is not the group in Keycloak or your SSO. That is managed outside of Kelvin UI.

This group is in the Attribute Based Access Control section and is directly linked to the identically named group in the authentication section, Keycloak or your SSO.

The authentication group determines the users who are assigned membership to this group.

Warning

You will still need to make the relevant Group with the same name in Keycloak or your SSO.

To start, click on User Management in the Administration section of the left side bar and click on the Add Group button.

You will see a popup appear.

Now type a friendly Display Name.

The name ID will be automatically created from the Display Name. You can change this if required.

Add from the list of available roles the ones that are relevant to your group and optionally add a description for this Group.

Then click the Add button.

Congratulations, you have created a new group and assigned Roles to it.

To edit the Group, click on User Management in the Administration section of the left side bar and then click on the options ... at the end of the row that you wish to edit, then click Edit.

You will then see the editing section of the selected Group.

Edit the Roles for the Group and then click the Save button to update.

Congratulations, you have updated a Group.

To edit the Group, click on User Management in the Administration section of the left side bar and then click on the options ... at the end of the row that you wish to edit, then click Delete.

You will then see a deletion confirmation popup.

Type PERMNANETLY DELETE in the text box and click delete to confirm the process.

Congratulations, you have deleted a Group.