Access Group Management

The Access Group Management page provides an overview of all existing access groups in your organization and allows administrators to create, edit, or delete them.

Navigate to Admin  Access Control to open the page.

1. Access groups overview

The access groups table lists all custom access groups configured for the current organization. Predefined roles (such as Uyuni Administrator or Organization Administrator) are built-in system roles and cannot be edited or deleted here; they are managed under Users  User List and Admin  Users.

Use the Filter by name or description field above the table to search for specific access groups.

The table displays the following columns:

  • Name: The unique name of the access group.

  • Description: The description of the role and its responsibilities.

  • Organization: The organization to which the access group belongs.

  • Users: The number of users currently assigned to the access group.

  • Permissions: The number of permissions granted to the access group.

  • Actions: Contains the following actions:

    • Edit icon: Click to view and modify group details, permissions, and assigned users.

    • Delete icon: Click to delete the access group.

2. Create access group

To create an access group, use the following procedure:

Procedure: Creating an access group

  1. In the Web UI, navigate to Admin  Access Control and click Create Access Group.

  2. On the Details page, fill in the following fields:

    • Name: Enter a unique name for the access group.

    • Description: Enter a description explaining the purpose of the group.

    • Organization: Select the organization to which the access group belongs.

    • Copy Permissions From: Optionally select one or more existing access groups to inherit permissions from. Once created, the new group functions independently, and future changes to either group do not affect the other.

  3. Click Continue.

  4. On the Namespaces & Permissions page, select the permissions to grant to the access group:

    • Select View to grant read-only access to a namespace.

    • Select Modify to grant full access, including creating, updating, or deleting resources.

    • Use the search bar (Filter by name) to locate specific namespaces.

    • Filter permissions using the API, Web, and Only selected checkboxes.

    • Click Expand All or Collapse All to expand or collapse all namespaces in the hierarchy.

  5. Click Continue.

  6. On the Users page, assign users to this access group:

    • Select a user from the Search & Add Users dropdown to add them to the group.

    • Review the list of assigned users in the table (showing Username, Email, and Real Name).

    • To remove an assigned user, click the Delete icon in the Actions column.

  7. Click Continue.

  8. On the Review page, verify the access group details, assigned users, and granted permissions.

  9. Click Create to finish creating the access group.

3. Namespaces and permissions

Permissions in Uyuni are organized hierarchically by namespaces. Namespaces represent two distinct scopes:

API namespaces

Represent programmatic API endpoints and XML-RPC/JSON-RPC functions (such as api.system.bootstrap or api.saltkey.accept). In the Web UI, API namespaces are indicated by an API icon. These permissions govern automated calls, scripts, and API interactions with the Uyuni Server.

Web UI namespaces

Represent functional areas, pages, and actions in the Web UI. For example, the account.address namespace corresponds to the User Account  Addresses page in the Web UI, while system.details.packages corresponds to the packages subtab in the system details view.

Each namespace supports two access levels:

  • View: Grants read-only access to view pages, inspect configurations, or retrieve data.

  • Modify: Grants full access to create, update, execute, or delete resources within that namespace.

The permissions table includes the following controls:

  • Search: Filter namespaces by name using the Filter by name field.

  • API filter: Display only permissions for API endpoints.

  • Web filter: Display only permissions for the Web UI.

  • Only selected filter: Display only the permissions currently selected for this access group, providing a quick summary of the granted rights.

  • Expand / Collapse: Toggle individual tree branches or use Expand All / Collapse All to expand or collapse the entire namespace tree.

Uyuni provides descriptions for common namespaces in the permissions table. SUSE plans to add full descriptions of all namespaces in future releases. For more information about RBAC architecture and namespace examples, see Role-Based Access Control (RBAC).

4. Edit or delete an access group

To modify an existing access group, use the following procedure:

Procedure: Editing an access group

  1. In the Web UI, navigate to Admin  Access Control.

  2. In the Actions column of the access group, click the Edit icon.

  3. The Access Group Details page opens with the Details, Namespaces & Permissions, and Users tabs.

  4. Adjust group properties, permissions, or user assignments as needed across the tabs. Note that the organization cannot be changed after creation.

  5. Click Update Access Group at the bottom of the page to save your changes.

To delete an access group, use the following procedure:

Procedure: Deleting an access group

  1. In the Web UI, navigate to Admin  Access Control.

  2. In the Actions column of the access group, click the Delete icon.

  3. In the Delete Access Group dialog, confirm the deletion. Deleting an access group revokes the custom role and its permissions from all assigned users.