Roles
Cockpit enables role managment for the operators. Roles are sets of permissions identified by a name.
Operators
A set of tools that allow main administrator to manage Cockpit operators. It also lets assign different management abilities based on the available permissions.
Assign Roles to operators
By assigning a role to an operator, this automatically inherits the permissions assigned to the role. An operator can be assigned multiple roles.
Assign agency to an operator
With this functionality, the administrator can assign an agency to an operator. This way some functionalities of the panel, such as user list, catalogs or app list, are filtered by the agency that belongs to the operator.
Lock/unlock operator accounts
An administrator with proper rights can lock or unlock a cockpit operator account.
This functionality is useful for operators that accidentally lock their account when they try to log-in three times with incorrect credentials.
Historic
All the actions performed by Cockpit tool operators are tracked and can be listed by an administrator.
The operations are categorized based on risk level (i.e: a user exportation request is marked as “high risk operation”).
All sensitive information changed or searched and, generally, all the operations that imply potential risk in terms of personal user data management, are being tracked, categorized and can be properly audited.