AuthN
AuthN is where you see which IAM groups a user belongs to and which application roles each group grants. It has one entry in the side menu, Groups, with two tabs:
| Tab | What it is for |
|---|---|
| Groups | Check a user’s IAM groups or search for a group, and attach or detach its roles. |
| Tenants | Check a user’s tenants according to their IAM groups. The tab is read-only. |
Concepts
- IAM group: a group of users in the corporate directory. Admin does not create or delete IAM groups; it only shows them and attaches roles to them.
- Role: a set of permissions for the MasStack applications. A user gets the roles of every group they belong to.
- Application role and domain role: the two kinds of role. The role assignment screen shows them in separate blocks, APPLICATION and DOMAIN.
- Relation type: how the user belongs to the group. Direct if they are a member of the group; Indirect if they are a member through another group nested in it; Direct and indirect if both apply.
- Tenant: the brand or company the user works with. Access to each tenant is also granted through an IAM group.