Overview
The JFrog Platform supports a role-based access control (RBAC) mechanism to manage user access rights to a Project and its allocated resources. RBAC is a method of restricting network access that is based on the roles of individual users within an organization.
The JFrog Platform supports three main role types - Platform roles, Global Roles, and Project roles that enable users assigned to the role to perform a set of actions associated with the role. On this page, you will learn how to manage Project roles and members for both Global and Project roles. We have also provided a detailed explanation of the Projects-supported actions according to the different role types. For more information, see Project Roles and Members Concepts.
WebUI Changes implemented in Artifactory 7.38.x and above
Identity & Access is now called User Management. All the relevant text and images on this page have been updated to reflect this change.
Managing Global Roles
Tip
Please note that the Access and Identity tab changes when navigating between the Platform view and the Project view in the UI. In the Platform view, you will find the Global roles and the Project view displays Members and Roles.
Global roles only apply to Projects and are predefined in the JFrog Platform. New Global roles cannot be added but Platform Admins can change the default environment and modify the actions set for each role. The Global roles are inherited from the Project roles and can be edited by the Project Admin at the Project level.
Required Platform Admin Permissions
Only users with the 'Administer the Platform' role can set the environments and modify the environments and actions set for Global roles.
Setting Environments and Actions for Global Roles
Tip
To view the Global roles in the Administration pane, ensure that you have selected All Projects from the Projects list in the taskbar.
The Platform Admin has the option to enable or disable the actions and the environments associated with each of the Global roles - Developer, Contributor, Viewer, and Release Manager.
From the Administration module, go to User Management | Global Roles.
A list of default Global roles is displayed, allowing you to change the default environment from DEV to PROD or enable both and modify the actions set on each role by selecting the edit icon located in the far right of the action entry.