Create Cluster Roles

Roles with cluster access allow access to the Cluster Management UI and REST API.

Default management roles

Redis Enterprise Software includes five predefined roles that determine a user's level of access to the Cluster Manager UI and [REST API]({{<relref "/operate/rs/7.8/references/rest-api">}}).

1. DB Viewer - Read database settings
2. DB Member - Administer databases
3. Cluster Viewer - Read cluster settings
4. Cluster Member - Administer the cluster
5. User Manager - Administer users
6. Admin - Full cluster access
7. None - For data access only - cannot access the Cluster Manager UI or use the REST API

For more details about the privileges granted by each of these roles, see Cluster Manager UI permissions or [REST API permissions]({{<relref "/operate/rs/7.8/references/rest-api/permissions">}}).

Cluster Manager UI permissions

Here's a summary of the Cluster Manager UI actions permitted by each default management role:

Create roles for cluster access {#create-cluster-role}

You can use the Cluster Manager UI or the REST API to create a role that grants cluster access but does not grant access to any databases.

Cluster Manager UI method {#create-roles-ui}

To create a role that grants cluster access:

1. From Access Control > Roles, you can:

   • Point to a role and select {{< image filename="/images/rs/buttons/edit-button.png#no-click" alt="The Edit button" width="25px" class="inline" >}} to edit an existing role.

   • Select + Add role to create a new role.

   {{<image filename="images/rs/access-control-role-panel.png" alt="Add role with name" >}}

2. Enter a descriptive name for the role.

3. Choose a Cluster management role to determine cluster management permissions.

   {{<image filename="images/rs/screenshots/access-control/rbac-create-role-cluster-only.png" alt="Select a cluster management role to set the level of cluster management permissions for the new role." >}}

4. To prevent database access when using this role, do not add any ACLs.

5. Select Save.

You can [assign the new role to users]({{<relref "/operate/rs/7.8/security/access-control/create-users#assign-roles-to-users">}}) to grant cluster access.

REST API method {#define-roles-rest-api}

To [create a role]({{<relref "/operate/rs/7.8/references/rest-api/requests/roles#post-role">}}) that grants cluster access:

POST /v1/roles
{ 
  "name": "<role-name>",
  "management": "db_viewer | db_member | cluster_viewer | cluster_member | user_manager | admin" 
}