Team Management & RBAC

Teams group users for access control purposes. RBAC is enforced by Kyverno and Keycloak — the Console gives admins a way to verify what each role can see and do.

Video: Team Management

Create teams, add members, and assign them to projects. Teams map to Keycloak groups and Kubernetes RBAC roles — changes made here propagate automatically to all integrated tools via the platform's SSO sync.

Video: RBAC Verification

Console has two platform roles (Platform Admin and Platform User) and three organization roles (Organization Admin, Organization Privileged, and Organization User). A Platform User needs an organization role to access that organization's resources. Platform Admins can administer every organization. Organization Privileged and Organization User have the same Console permissions, though access in connected tools can differ.