Access Control

Groups

Groups enable the Access Control mechanism that allows admins to restrict runops users to access only certain resources.

Groups is a comma-separated string that defines all groups that a user belongs to. The groups declared in the user will allow this user to only access other resources (like targets or approve tasks) whose groups match one of their groups.

For instance, the above statement will allow this user only to use targets whose groups are either dev or support. Also if a target has a review flow configured, this user will be able to approve only tasks whose groups are either dev or support.