RBAC

Configure who can access xDP and what they can do using role-based access control (RBAC) in Admin Central.

What is RBAC?

Role-based access control (RBAC) assigns permissions through roles rather than to individual users directly. In xDP:

Users are added to groups (for example Admin, Contributor, Viewer).
Each group is assigned one or more tenant roles.
Each tenant role bundles permissions — the platform features a user can view, create, modify, or delete.

When a user signs in to xDP, the UI loads their effective permissions and shows only the menus and actions they are allowed to use.

Term	Description
User	A person who signs in to xDP with a tenant account
Group	A collection of users; roles are typically assigned to groups, not individuals
Tenant role	A named set of permissions scoped to the xDP product in Admin Central
Permission	Access to a platform feature at a given level (View, Modify, Delete, or Create)
Service user	A non-human account used for cluster creation and automation

You hold the Tenant Admin role or User Management permissions (create/modify users, roles, and groups).
You can open Settings → Admin Central in xDP and sign in to the Admin Central portal.

Step	Page
Create groups, add users, configure the default service user for cluster creation	Users and Groups
Assign roles to groups and review permissions	Roles and Permissions

Recommended order:

Users and Groups — Open Admin Central, create Admin, Contributor, and Viewer groups, add users, and configure dataplane-service-user with the required ADOC and xDP roles before creating clusters.
Roles and Permissions — Assign Tenant Admin, Editor, and Viewer to each group and review the permission reference.

Last updated on

Was this page helpful?