No contexto de gerenciamento de usuários New Relic, uma permissão é uma tarefa específica que você pode realizar com New Relic. Diversas permissões estão incluídas em nossas funções pré-configuradas (por exemplo, consulte nossas funções padrão). Aqui estão alguns exemplos de permissões:
- A capacidade de visualizar as configurações do aplicativo APM.
- Modificar condição do alerta
- Gerenciar configurações de retenção de dados
- Criar domínio de autenticação a nível organizacional
- Implantar frotas individuais em recursos específicos
Você pode criar funções personalizadas em três escopos diferentes e adicionar qualquer número de permissões a elas:
- permissões no escopo da organização: Para funções administrativas em toda a organização (gerenciamento de identidade e acesso, New Relic One, chave de API, segurança, etc.)
- Permissões com escopo de conta: Para recursos da plataforma dentro de contas específicas (APM, Browser, infraestrutura, alertas, etc.)
- Permissões com escopo de entidade: Para acesso granular a recursos específicos.
Para saber quais permissões uma função possui, acesse a interface de gerenciamento do usuário e visualize uma função específica. Para encontrar esta interface: Em one.newrelic.com, clique no menu do usuário no canto inferior direito e vá para: Administration > Access management > Roles.
Pontos importantes sobre permissões
Um usuário completo da plataforma New Relic sem limitações (por exemplo, um usuário no grupo Admin) é capaz de usar todos os recursos da plataforma. Muitas, mas não todas, das tarefas que você pode realizar no New Relic estão disponíveis como permissions. Você pode adicionar ou remover essas permissões de uma função personalizada, e também usamos essas permissões para diferenciar nossas funções padrão. As permissões que tornamos visíveis e disponíveis para seleção são aquelas que acreditamos serem mais úteis para tarefas comuns de gerenciamento de usuários.
Existem muitas funcionalidades do New Relic que não tornamos visíveis e disponíveis como permissões que você pode selecionar. Por exemplo, existem várias páginas da interface do usuário que você pode acessar como qualquer usuário e que não são restritas pelas permissões que expomos.
Dica
Às vezes, as permissões também podem ser chamadas de capabilities.
Aqui estão alguns outros pontos importantes sobre permissões:
- A user's user type must also allow access. O acesso de um usuário ao recurso New Relic é governado pelo tipo de usuário e pelas funções atribuídas. Para obter mais informações, consulte Acesso do usuário.
- Some permissions overlap in functionality. É por isso que selecionar algumas caixas de seleção de permissões na interface marcará ou desmarcará automaticamente outras caixas.
- Permissions don't affect querying of data. A maioria das permissões se aplica à interface do New Relic e às experiências de API, e não à consulta de dados. Por exemplo, se suas permissões restringirem o acesso à interface , você ainda poderá consultar os dados do APM se tiver acesso a essa conta. Se você precisar de limites de dados mais firmes para alguns projetos ou usuários, poderá segmentar seus dados em contas diferentes.
Para saber mais sobre as principais formas de controle das permissões dos usuários, consulte Conceitos de gerenciamento de usuários.
Nossos papéis pré-construídos
Nossos perfis predefinidos possuem diversos agrupamentos de permissões. Veja mais sobre funções.
Definições de permissão
Você pode acessar a interface do usuário para visualizar as permissões de cada uma de nossas funções predefinidas. No canto inferior esquerdo da interface do usuário, clique no seu nome para abrir o menu do usuário e, em seguida, acesse Administration > Access management > Roles.
A interface do usuário fornece informações detalhadas sobre as permissões para todas as funções, incluindo:
- Todos administradores de produtos
- Usuário padrão
- Somente leitura
- Todas as funções personalizadas em sua organização
A interface de gerenciamento de acesso exibe os detalhes de permissão mais recentes para cada função.
/ Commented out detailed permission definitions as they are maintained in the UI and may become outdated <CollapserGroup> <Collapser id="identity-access-management" title="Identity and Access Management" > These organization-scoped permissions pertain to managing users, groups, roles, and authentication domains within your organization: <DNT>Accounts</DNT>: Create and manage accounts within your organization. <DNT>Authentication Domains</DNT>: Configure how users are provisioned and authenticated. <DNT>Data Access Policies</DNT>: Create and manage policies that control access to log data partitions. <DNT>Grants</DNT>: Create and manage access grants that link groups to roles over specific targets. <DNT>Groups</DNT>: Create and manage user groups within authentication domains. <DNT>Roles</DNT>: Create and manage custom roles with specific permissions. <DNT>Users</DNT>: Add, remove, and manage users within your organization. </Collapser> <Collapser id="alerts" title="Alerts" > These permissions pertain to our legacy alerting feature, not to our applied intelligence permissions and incident intelligence permissions. Permissions: <DNT>Channels</DNT>: relates to alert notification channels. <DNT>Conditions</DNT>: relates to alert conditions. <DNT>Incidents</DNT>: relates to alert events and view alert events from our products. <DNT>Lifecycle overrides</DNT>: relates to muting rules. <DNT>Policies</DNT>: relates to alert policies. <DNT>Cross-account alerts</DNT>: relates to cross-account alerts. </Collapser> <Collapser id="api-keys" title="API keys" > These permissions pertain to creating and managing our API keys: <DNT>Browser keys</DNT>: relates to the browser key. <DNT>License keys</DNT>: relates to the license key. <DNT>User API keys</DNT>: relates to the user key. </Collapser> <Collapser id="apm" title="APM" > These permissions pertain to our APM agents and associated features: <DNT>Application settings</DNT>: relates to the APM <DNT>Application settings</DNT> UI page. <DNT>Deployments</DNT>: relates to the APM deployments UI page. <DNT>Embedded charts</DNT>: relates to the <DNT>Get chart link</DNT> feature. <DNT>Errors (all)</DNT>: relates to error trace details. <DNT>Errors (individual)</DNT>: relates to error trace details. <DNT>Instrumentation</DNT>: relates to adding custom instrumentation. <DNT>Key transactions</DNT>: relates to key transactions. <DNT>Labels</DNT>: relates to tags for APM data. <DNT>Log settings</DNT>: relates to APM logs. <DNT>Slow SQL</DNT>: relates to slow query data. <DNT>Thread profiles</DNT>: relates to the thread profiler. <DNT>Transaction traces (all)</DNT>: relates to transaction traces. <DNT>Transaction traces (individual)</DNT>: relates to transaction traces. </Collapser> <Collapser id="applied-intelligence" title="Applied intelligence" > These permissions pertain to applied intelligence features: <DNT>Channels</DNT>: relates to notification channels. <DNT>Comments</DNT>: relates to postmortem comments. <DNT>Destinations</DNT>: relates to destinations. <DNT>Incident analysis</DNT>: relates to the part of the <DNT>Issues & activity</DNT> page where golden signals and component are shown. <DNT>Issue RCA</DNT>: relates to root cause analysis. <DNT>Issues</DNT>: relates to incident intelligence issues. <DNT>Issues configuration</DNT>: relates to issue configuration. <DNT>Issues feed</DNT>: relates to the issues feed. <DNT>Workflows</DNT>: relates to workflows. </Collapser> <Collapser id="browser" title="Browser" > These permissions pertain to <InlinePopover type="browser"/>: <DNT>Application settings</DNT>: relates to browser application settings. <DNT>Domain conditions</DNT>: relates to browser domain conditions. <DNT>Segment allow lists</DNT>: relates to segmenting allow lists. <DNT>View session replays</DNT>: relates to viewing replays.. </Collapser> <Collapser id="dashboards" title="Dashboards" > <DNT>Live chart URL</DNT>: relates to the share chart features for charts generated from NRQL queries. </Collapser> <Collapser id="data-platform" title="Data platform" > <DNT>Streaming export</DNT>: relates to streaming data export. </Collapser> <Collapser id="data-retention" title="Data retention" > <DNT>Insights event retention</DNT>: This governs the ability to manage data retention values within the bounds of a contract for specific data namepsaces. </Collapser> <Collapser id="errors-inbox" title="Errors inbox" > <DNT>Attribute analysis</DNT>: relates to the attributes tab. </Collapser> <Collapser id="incident-intelligence" title="Incident intelligence" > These permissions pertain to incident intelligence: <DNT>Automatic inactivity closing policy</DNT>: refers to time-to-live settings for inactive/idle issues. <DNT>Cartographer</DNT>: relates to topology settings. <DNT>Decisions</DNT>: relates to applied intelligence decisions. <DNT>Destinations</DNT>: relates to a deprecated incident intelligence destination system. <DNT>Environments</DNT>: relates to environments. <DNT>Grace period policy</DNT>: relates to grace period policy settings. <DNT>Incidents</DNT>: relates to alert events. <DNT>Input source configuration</DNT>: relates to incident sources. <DNT>Issues</DNT>: relates to incident intelligence issues. <DNT>Pathways</DNT>: relates to the mostly deprecated incident intelligence pathways feature. <DNT>Platforms</DNT>: relates to the mostly deprecated incident intelligence platforms feature. <DNT>Suggested decisions</DNT>: relates to decisions suggested by applied intelligence. </Collapser> <Collapser id="incident-workflows" title="Incident workflows" > <DNT>Workflows</DNT>: relates to a preview workflows feature that will likely be deprecated in 2022. </Collapser> <Collapser id="infinite-tracing" title="Infinite Tracing" > <DNT>Trace observers</DNT>: relates to the trace observer. </Collapser> <Collapser id="infrastructure" title="Infrastructure" > <DNT>Cloud integrations</DNT>: relates to cloud integrations. <DNT>Filter sets</DNT>: relates to filter sets. This feature is in process of being deprecated and is only available on the infrastructure <DNT>Events</DNT> and <DNT>Inventory</DNT> UI pages. </Collapser> <Collapser id="insights" title="Insights" > <DNT>Insights</DNT> is the original name for a product that had features related to custom data ingest, custom queries, custom charts, and custom dashboards. Permissions include: <DNT>Any dashboard</DNT>: relates to the ability to delete any dashboard in an account. <DNT>Data sources</DNT>: relates to a now deprecated UI that allowed for controlling what data was reported to New Relic. <DNT>Events to metrics</DNT>: this governs: Events-to-metrics rules and data Service level indicators and objectives <DNT>Insert keys</DNT>: relates to our mostly deprecated Insights insert key (a license key is preferred). <DNT>NRQL drop rules</DNT>: relates to dropping data with drop rules. <DNT>Query keys</DNT>: relates to our mostly deprecated Insights query key (the <InlinePopover type="userKey"/> is preferred). </Collapser> <Collapser id="logs" title="Logs" > <DNT>Data partition rules</DNT>: relates to data partitions. <DNT>Live archives configuration</DNT>: relates to configuring live archives retention for logs. <DNT>Live archives query</DNT>: relates to querying logs stored in live archives. <DNT>Obfuscation rules</DNT>: relates to log obfuscation. <DNT>Parsing rules</DNT>: relates to log parsing. <DNT>Pipeline configuration</DNT>: relates to configuring the log data pipeline. Currently this governs log patterns. <DNT>Public saved views</DNT>: relates to saved views that are public. </Collapser> <Collapser id="maps" title="Maps" > <DNT>Service maps</DNT>: relates to service maps. </Collapser> <Collapser id="mobile" title="Mobile" > <DNT>Applications</DNT>: relates to <InlinePopover type="mobile"/> features for your monitored apps. <DNT>Crashes</DNT>: relates to crash analysis features. </Collapser> <Collapser id="new-relic-one" title="New Relic One" > These are assorted permissions related to basic features of the New Relic platform (sometimes referred to as New Relic): <DNT>Entities</DNT>: relates to creating and deleting New Relic-monitored entities. <DNT>Entity relationships</DNT>: relates to entity relationships. <DNT>Golden metrics</DNT>: relates to golden metrics (key metrics) in curated user experiences. <DNT>Nerdpacks</DNT>: relates to New Relic apps. <DNT>NRQL lookups</DNT>: relates to the ability to use lookup tables. <DNT>Pixie account link</DNT>: this capability allows the creation of an associated Pixie account when adding Pixie to a cluster from our guided install. <DNT>Pixie credentials</DNT>: relates to access of linked Pixie accounts. <DNT>Pixie live data</DNT>: enables access to live debugging data in the Kubernetes cluster explorer. <DNT>Repositories</DNT>: relates to creating and deleting New Relic-monitored repositories (used by features like New Relic CodeStream). <DNT>Tags</DNT>: relates to platform tagging. <DNT>Workloads</DNT>: relates to workloads. </Collapser> <Collapser id="plugins" title="Plugins" > <DNT>Configurations</DNT>: refers to our deprecated plugins feature. </Collapser> <Collapser id="synthetics" title="Synthetics" > These permissions pertain to synthetics monitoring: <DNT>Configure private locations</DNT>: relates to private locations. <DNT>Monitor downtimes</DNT>: relates to monitor downtimes. <DNT>Monitor scripts</DNT>: relates to scripted monitors (scripted browser monitors and scripted API test monitors). <DNT>Monitors</DNT>: relates to ability to configure synthetic monitors (for example, name, period, and locations). The bulk runtime upgrade permission allows you to make runtime changes using the runtime upgrades UI. <DNT>Secure credentials</DNT>: relates to secure credentials. </Collapser> <Collapser id="security" title="Security" > <DNT>Vulnerabilities</DNT>: refers to the ability to view and manage vulnerabilities detected in entities. </Collapser> </CollapserGroup> /