< img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=3131724&fmt=gif" />
🚀 KubeSphere v4.1.2 with Enhancements and Bug Fixes is available now. Read the release notes for v4.1.2 → close
  • English
    • English
    • 简体中文
    1. 1.Create a KubeSphere Cloud account and log in to the platform.
    2. 2.In the upper-right corner, click Console, and then click Lite Cluster on the left.
    3. 3.Create a K8s cluster with KubeSphere installed.
    4. 4.Access KubeSphere with the default account and password (admin/P@88w0rd).
  •  Star
  1. Docs / 
  2. Documentation / 
  3. Quick Start / 
  4. Control User Permissions

Documentation

Last updated:
    Edit

    Create Workspaces, Projects, Users, and Platform Roles

    This section explains how to create users and control their permissions by roles in workspaces and projects. For more information on permission control, please refer to Users and Roles.

    As a multi-tenant system, KubeSphere supports controlling user permissions based on roles at the platform, cluster, workspace, and project levels, achieving logical resource isolation.

    Prerequisites

    KubeSphere has been installed.

    Create Users

    1. Log in to the KubeSphere web console using the default user admin and password P@88w0rd.

      Note

      For security, you will be asked to change your password on your first login, please change it and use the new password for subsequent logins.

    2. Click Users and Roles.

    3. In the left navigation pane, click Users.

    4. Click Create above the user list.

    5. In the Create User dialog, enter the following required parameters:

      • Username

      • Email

      • Password

    6. Click OK. The newly created user will be displayed in the user list.

    Create Workspaces

    1. Log in to the KubeSphere web console.

    2. Click Workspace Management.

    3. On the list of workspaces page, click Create to open the Create Workspace dialog.

    4. On the Basic Information tab, enter the name of the workspace (for example, demo-workspace), and click Next.

      Note

      For multi-cluster environments, after setting the basic information, you should select a cluster for the workspace on the Cluster Settings tab.

    5. Click OK. The newly created workspace will be displayed in the workspace list.

    Create Workspace Roles

    1. On the list of workspaces page, click demo-workspace to enter that workspace.

    2. In the left navigation pane, click Workspace Settings > Workspace Roles.

      The Workspace Roles page lists the following four built-in roles by default.

      Roles Description

      workspace-viewer

      A workspace viewer who can view all resources in the workspace.

      workspace-self-provisioner

      A regular member of the workspace who can view workspace settings, and create projects.

      workspace-regular

      A regular member of the workspace who can view workspace settings.

      workspace-admin

      A workspace administrator who can manage all resources in the workspace.
      Note

      The names of the built-in roles in a workspace are displayed in the <workspace name>-<role name> format. For example, in a workspace named demo-workspace, the actual role name for the role admin is demo-workspace-admin.

    3. On the Workspace Roles page, click Create.

    4. In the Create Platform Role dialog, enter Name and click Edit Permissions to continue.

    5. In the Edit Permissions dialog, the permissions are categorized.

      Click Projects and select Project Creation, Project Management, and Project Viewing for this role.

      Note

      Depends On means that the current permission depends on the listed authorizations, which will be automatically selected when you check this permission.

    6. Click OK. The newly created role will be displayed in the list of workspace roles.

    Invite Users to a Workspace

    1. In the left navigation pane, click Workspace Settings > Workspace Members.

    2. On the Workspace Members page, click Invite.

    3. In the Invite Member dialog, click add to the right of the user and assign the user a role in the current workspace.

    4. Click OK. The user is invited and will be displayed in the list of workspace members.

    Create Projects

    1. In the left navigation pane, select Projects.

    2. On the Projects page, click Create.

    3. In the Create Project dialog, enter the name of the project (e.g., demo-project).

      Note

      For a multi-cluster environment, you should choose the cluster where you want to create the project.

    4. Click OK. The project will be displayed in the project list.

    Create Project Roles

    1. On the Projects page, click demo-project to enter the project.

    2. In the left navigation pane, click Project Settings > Project Roles.

      The Project Roles page displays the following three built-in roles by default.

      Role Description

      viewer

      A project viewer who can view all resources in the project.

      operator

      A project operator who can manage resources in the project excluding users and roles.

      admin

      A project administrator who can manage all resources in the project.

    3. On the Project Roles page, click Create.

    4. In the Create Role dialog, enter Name, then click Edit Permissions to proceed.

    5. In the Edit Permissions dialog, the permissions are categorized.

      In this example, click Access Control and select Member Viewing and Role Viewing for this role.

      Note

      Depends On means that the current permission depends on the listed authorizations, which will be automatically selected when you check this permission.

    6. Click OK. The newly created role will be displayed in the list of project roles.

    Invite Users to a Project

    1. In the left navigation pane, click Project Settings > Project Members.

    2. On the Project Members page, click Invite.

    3. In the Invite Member dialog, click add to the right of the user and assign the user a role in the current project.

    4. Click OK. The user is invited and will be displayed in the list of project members.

    Receive the latest news, articles and updates from KubeSphere


    Thanks for the feedback. If you have a specific question about how to use KubeSphere, ask it on Slack. Open an issue in the GitHub repo if you want to report a problem or suggest an improvement.

    Previous : Install Demo Extensions
    What’s on this Page