Apply for invite to IaCP

Users and Teams

Overview

To gain access to Scalr, a user must first be added and linked to a team. Teams are given access to environments, not individual users (except for admins). There are two types of users and teams:

  • Local - All users and teams are stored, updated, and managed in Scalr.

  • External - All users and team are stored and managed in an external system like AD or LDAP. To find out more about AD or LDAP integration, please go to the ldap page.

As seen in the diagram below, user and team management happens at the account scope and the team is then applied to an environment. A team can have access to one more accounts and environments.

../_images/multi-tenant.png

Configuring Users

Scalr Local Users

To add an end user to a Scalr account:

  • Ensure you are logged into the account scope as either an administrator or as the account owner.

  • Click on the main menu on the top left MENU_ACC.

  • Click on new user:

    ../_images/new_user0.png
  • On the right hand side of the users panel, you will see an entry section for new user. Enter the user’s email address.

  • Click add to team to add the new user to a selected team if desired, if the team is already created.

  • The user will receive an email letting them know they have access and they can set their password at the first login.

    ../_images/new_user1.png

Note

The ability to apply an ACL to control user permissions will be in a future release.

Externally Authenticated Users

If you are using an external system to manage your teams, you do not have to manually add users. The users will gain access to Scalr when their AD/LDAP team is added into Scalr. The user will appear after that user logs in for the first time. See more about adding teams below.

Configuring Teams

Scalr Local Teams

To add a team to a Scalr account:

  • Ensure you are logged into the account scope as either an administrator or as the account owner.

  • click on the main Scalr menu on the top left MENU_ACC, and go down to teams.

    ../_images/new_team.png
  • Enter a name for your team.

  • If existing users are present, click on the plus sign next to a member in the table to attach them to the team. Otherwise, you will need to add a user before members can be attached to your new team.

Externally Authenticated Teams

To add an externally managed team:

  • Ensure you are logged into the account scope as either an administrator or as the account owner.

  • Click on the main menu on the top left MENU_ACC, and go down to teams.

  • Add the team name (LDAP name, group id, etc - this is based on your LDAP settings) into the new team field seen above. On save, Scalr will verify the team with LDAP/AD and if no errors are received it will be added to Scalr. As explained above, users will automatically be added to Scalr after they log in for the first time.

Note

The ability to apply an ACL to control team permissions will be in a future release.

Adding Teams to Environments

Now that you have created teams, they must be added to an environment for their users to be able to do anything. If you add a team, but do not add that team to an environment then the users will receive an error when they try to log in.

To add a team to an environment:

  • Ensure you are logged into the account scope as either an administrator or as the account owner.

  • Click on the main menu on the top left MENU_ACC, and go down to environments.

  • Click on the environments tab and then the environment you would like to add the team to. The currently selected environment will appear in light gray, as shown below by the “Dev” environment selection below:

    ../_images/team_environment.png
  • In the grant access panel, tick the checkbox next to the desired team and then grant access. You may also add teams here.

    ../_images/team_environment1.png
  • Click save and the team will now have access to the environment that it was added to.

Global Admins

Note

The global admin role only exists in the on-prem version of Scalr.

A global admin is generally someone who manages Scalr in general. Out of the box, Scalr has one global admin named “admin”, this user can add more admins if needed. To add a global admin, go to the Scalr scope and click on Users. Once you are on the users page, click on new user, enter the information that is prompted for, and then make sure you tick the global admin radio button:

../_images/global_admin.png