mirror of
https://github.com/hanzoai/kms.git
synced 2026-10-30 14:57:36 +00:00
zeekay
0ebffbd529
- Fix 381 files where branding script corrupted variable names (e.g. isHanzo KMSTemplate -> isKmsTemplate) - Rebrand from "Hanzo KMS" to just "KMS" for white-label support (allows Lux KMS, Hanzo KMS, etc. via configuration) - 856 files, purely string replacements, no logic changes
22 lines
1.6 KiB
Plaintext
22 lines
1.6 KiB
Plaintext
---
|
|
title: "Additional Privileges"
|
|
description: "Learn how to add specific privileges on top of predefined roles."
|
|
---
|
|
|
|
Even though KMS supports full-fledged [role-base access controls](./role-based-access-controls) with ability to set predefined permissions for user and machine identities, it is sometimes desired to set additional privileges for specific user or machine identities on top of their roles.
|
|
|
|
KMS **Additional Privileges** functionality enables specific permissions with access to sensitive secrets/folders by identities within certain projects. It is possible to set up additional privileges through Web UI or API.
|
|
|
|
To provision specific privileges through Web UI:
|
|
1. Click on the `Edit` button next to the set of roles for user or identities.
|
|
|
|
|
|
2. Click `Add Additional Privileges` in the corresponding section of the permission management modal.
|
|
|
|
|
|
3. Fill out the necessary parameters in the privilege entry that appears. It is possible to specify the `Environment` and `Secret Path` to which you want to enable access.
|
|
It is also possible to define the range of permissions (`View`, `Create`, `Modify`, `Delete`) as well as how long the access should last (e.g., permanent or timed).
|
|
|
|
|
|
4. Click the `Save` button to enable the additional privilege.
|
|
 |