Configure User Access

There are two ways to configure user access in Salem

1. If you are employing AzureAD and wish to leverage the "Users and groups" provided by Microsoft Entra ID, you should follow the instructions provided here to create user roles. Otherwise, useRoleConfAzureAD = true can be set to use RoleConf for assigning user roles within Salem application.

2. Salem also manages user roles through RoleConf, an internal design created by Salem to handle user roles. For example, if you use Google Auth or Slack Auth, Salem will employ RoleConf to assign roles to authenticated users for authorization purposes. To view current RoleConf entries, Type 'view --admin' in the message bar Select "Configs" Select "RoleConf" in the dropdown and submit the form This is a sample RoleConf entry.

   { 
     "id": "example",
     "disabled": 0, 
     "type": "direct", 
     "user": "[email protected]", 
     "roles": [ "salem.analyst", "salem.admin" ] 
   }

   Note: A new entry in the RoleConf must be added for each user to customize user access. The property 'user' value must match the value provided by the identity provider and it must be unique. Salem also provides a default RoleConf entry. The assigned roles in this entry are assigned to all users who have access to Salem. For information on available Salem roles, see: Role Based Access Control (RBAC)