<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>article Expedition RBAC System. Users, Roles, How this works? in Expedition Articles</title>
    <link>https://live.paloaltonetworks.com/t5/expedition-articles/expedition-rbac-system-users-roles-how-this-works/ta-p/214571</link>
    <description>&lt;P&gt;Expedition comes with a framework to manage the Role-Based Access Control, this will help you to add users with different level of privileges.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp;&lt;STRONG&gt;1) Expedition User Roles:&amp;nbsp;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;a) &lt;U&gt;Super User&lt;/U&gt;: This Role allows the User to manage everything on Expedition&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;b) &lt;U&gt;Admin&lt;/U&gt;: This Role allows the user to Create projects and devices but cannot change system settings or add new users&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;c) &lt;U&gt;User&lt;/U&gt;: This Role allows the user only to enter on Expedition and see projects and devices where has been granted access.&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp;&amp;nbsp;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="View of adding a new user to Expedition" style="width: 544px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21579i174D1A7AB6F28D5A/image-size/large?v=v2&amp;amp;px=999" role="button" title="Expedition User Roles.png" alt="View of adding a new user to Expedition" /&gt;&lt;span class="lia-inline-image-caption" onclick="event.preventDefault();"&gt;View of adding a new user to Expedition&lt;/span&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp;&lt;STRONG&gt;2) Project User Roles:&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; When a project is created by an Expedition Super-User or Admin, this can be edited by clicking on Settings&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="View of Expedition Project Settings" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21580i1655B8BCB15DE83B/image-size/large?v=v2&amp;amp;px=999" role="button" title="Expedition Projects Library Settings.png" alt="View of Expedition Project Settings" /&gt;&lt;span class="lia-inline-image-caption" onclick="event.preventDefault();"&gt;View of Expedition Project Settings&lt;/span&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; From the Settings window, we can add Expedition Users to the Project. Inside the Project, we have&amp;nbsp;different Roles:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; a) &lt;U&gt;admin&lt;/U&gt;: This Role can change the Project Settings and modify all the content within it.&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; b) &lt;U&gt;user&lt;/U&gt;: This Role can edit the project contents but it cannot change the project settings to add more devices or users to the project.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; c) &lt;U&gt;viewer&lt;/U&gt;: This&amp;nbsp;Role is for read-only purposes. Doesn't have any privileges to change nothing inside the project or manage the project settings.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="View of Edit Project panos to add Expedition users." style="width: 600px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21581i46C8C06DDA774893/image-size/large?v=v2&amp;amp;px=999" role="button" title="Edit Project Add Expedition user.png" alt="View of Edit Project panos to add Expedition users." /&gt;&lt;span class="lia-inline-image-caption" onclick="event.preventDefault();"&gt;View of Edit Project panos to add Expedition users.&lt;/span&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;As an example, you can create a new Expedition user with Role (User) and attach this user to one Project as (admin), in this case the User be able to manage only the project and the content but it will be unable to add more projects, devices or users to Expedition.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Hope this helps to clarify how to assign Roles.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 27 Sep 2019 18:32:51 GMT</pubDate>
    <dc:creator>alestevez</dc:creator>
    <dc:date>2019-09-27T18:32:51Z</dc:date>
    <item>
      <title>Expedition RBAC System. Users, Roles, How this works?</title>
      <link>https://live.paloaltonetworks.com/t5/expedition-articles/expedition-rbac-system-users-roles-how-this-works/ta-p/214571</link>
      <description>&lt;P&gt;Expedition comes with a framework to manage the Role-Based Access Control, this will help you to add users with different level of privileges.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp;&lt;STRONG&gt;1) Expedition User Roles:&amp;nbsp;&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;a) &lt;U&gt;Super User&lt;/U&gt;: This Role allows the User to manage everything on Expedition&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;b) &lt;U&gt;Admin&lt;/U&gt;: This Role allows the user to Create projects and devices but cannot change system settings or add new users&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;c) &lt;U&gt;User&lt;/U&gt;: This Role allows the user only to enter on Expedition and see projects and devices where has been granted access.&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp;&amp;nbsp;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="View of adding a new user to Expedition" style="width: 544px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21579i174D1A7AB6F28D5A/image-size/large?v=v2&amp;amp;px=999" role="button" title="Expedition User Roles.png" alt="View of adding a new user to Expedition" /&gt;&lt;span class="lia-inline-image-caption" onclick="event.preventDefault();"&gt;View of adding a new user to Expedition&lt;/span&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp;&lt;STRONG&gt;2) Project User Roles:&lt;/STRONG&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; When a project is created by an Expedition Super-User or Admin, this can be edited by clicking on Settings&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="View of Expedition Project Settings" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21580i1655B8BCB15DE83B/image-size/large?v=v2&amp;amp;px=999" role="button" title="Expedition Projects Library Settings.png" alt="View of Expedition Project Settings" /&gt;&lt;span class="lia-inline-image-caption" onclick="event.preventDefault();"&gt;View of Expedition Project Settings&lt;/span&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; From the Settings window, we can add Expedition Users to the Project. Inside the Project, we have&amp;nbsp;different Roles:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; a) &lt;U&gt;admin&lt;/U&gt;: This Role can change the Project Settings and modify all the content within it.&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; b) &lt;U&gt;user&lt;/U&gt;: This Role can edit the project contents but it cannot change the project settings to add more devices or users to the project.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; c) &lt;U&gt;viewer&lt;/U&gt;: This&amp;nbsp;Role is for read-only purposes. Doesn't have any privileges to change nothing inside the project or manage the project settings.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="View of Edit Project panos to add Expedition users." style="width: 600px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/21581i46C8C06DDA774893/image-size/large?v=v2&amp;amp;px=999" role="button" title="Edit Project Add Expedition user.png" alt="View of Edit Project panos to add Expedition users." /&gt;&lt;span class="lia-inline-image-caption" onclick="event.preventDefault();"&gt;View of Edit Project panos to add Expedition users.&lt;/span&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;As an example, you can create a new Expedition user with Role (User) and attach this user to one Project as (admin), in this case the User be able to manage only the project and the content but it will be unable to add more projects, devices or users to Expedition.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Hope this helps to clarify how to assign Roles.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 27 Sep 2019 18:32:51 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/expedition-articles/expedition-rbac-system-users-roles-how-this-works/ta-p/214571</guid>
      <dc:creator>alestevez</dc:creator>
      <dc:date>2019-09-27T18:32:51Z</dc:date>
    </item>
  </channel>
</rss>

