RBAC
Role‑based access control (RBAC) ensures that only authorized users can view or modify monitoring configuration and data.
Use this guide to explore common access roles and access-control principles used within Unified Monitoring.
Typical Roles
Although exact roles vary by organization, common patterns include:
- Monitoring Administrators – configure integrations, global alerting standards, and routing trees.
- Service Owners/Application Teams – manage policies and dashboards for their services.
- NOC/Operations Center – triage alerts, manage silences, and coordinate incident response.
- Read‑only Users – view dashboards and alert status but cannot change configuration.
Principles
- Apply least privilege – users should have only the access they need to do their job.
- Separate duties between configuration (for example, routing, integrations) and response (for example, acknowledging alerts).
- Use groups from your identity provider (for example, Okta, Azure AD) to manage access at scale.
Practical Tips
- Map RBAC roles to CMDB ownership fields (for example,
Application Owner) so teams can manage their own services. - Periodically review membership of privileged roles.
- Include RBAC checks in onboarding/off‑boarding processes for employees and contractors.