Roles Management
Comprehensive roles management in BigPanda allows you to easily dictate access to resources. Permissions are separated by functional area and resource type, with the ability to create roles based on environments in BigPanda.
Roles Management
Key Features
Create and customize roles to restrict the availability of your organization's sensitive content.
Adjust access to areas and functionality of BigPanda on a per-user basis.
Organizations using Single Sign-On with Just-in-Time Provisioning can automatically assign roles to user accounts the first time they sign in to BigPanda.
Protect your organization's resources by configuring access to specific environments.
The separation of duties provided by Role-Based Access Control (RBAC) localizes areas of access, providing very clear parameters for each user's responsibilities.
Relevant Permissions
Only users with Full access can grant role permissions for a newly created resource. Add Roles Management with Full Access for access to these permissions.
Permission Name | Description |
|---|---|
Roles Management | View, add, edit, and delete BigPanda Roles. |
Access Levels
A user account may have one or more roles, and each role may have one or more permissions associated with it. The same role can be assigned to any number of accounts.
BigPanda provides three default roles: Admin, User, and Viewer (Read Only).
The Admin role includes full access to all areas of BigPanda, including the ability to interact with and make changes to resources. The role includes view only access to settings screens, and full access to take action on incidents in all environments. The Viewer (Read Only) role provides read-only access to all screens.
These default roles can be duplicated and then customized to adjust the permissions or level of access granted to your organization's BigPanda accounts or service keys.
Each permission in BigPanda has two options that dictate the level of access. The two access levels provided by BigPanda permissions are:
View - Read-only access. The resource cannot be interacted with or edited.
Full Access - All actions related to the resource can be performed.
Environment permissions can also be configured to control user access and actions in each environment. See Environment Permissions for more information.
For more information about Permission types in BigPanda, see Roles and Resource Permissions.
Create a Role
BigPanda Comprehensive Roles Management allows you to create custom roles that have access to specific sections and actions within BigPanda.
Build roles within your organization using the permissions specific to each individual BigPanda resource.
 |
Create New Role
To create a new role:
Navigate to Settings > Roles Management.
Click New Role.
In the Create New Role window, enter a descriptive Role name.
Add permissions to the role using the checkboxes. Permissions are divided by functional area in BigPanda. You can select the View or Full Access option for each permission. See Roles and Resource Permissions for more information about each role.
In the Environment Permissions section, select which environments the role has access to from the Edit environment settings, Incident actions, and/or View incidents permission drop-down. Each role must have access to at least one environment to use BigPanda. See Environment Permissions for more information.
Click Create Role to save the role.
Manage Users
Adding a user to a role provides them with access to all of the permissions configured in the role. Users can be added or removed to a role from within the role details pane.
 |
Add a User to a Role
Add a User
To add a user to a role:
Select the role you wish to add a user to.
In the role details pane, select the Users column.
Click the Add Users button.
In the Add Users to Role window, select users from the drop down menu, or type the name(s) of users you would like to add.
Click Add Users to save.
Remove a User
To remove a user from a role:
Select the role you wish to remove a user from.
In the role details pane, select the Users column.
In the list of users, find the user you’d like to remove.
Click the Remove button.
Manage roles
Roles can be viewed and managed in BigPanda at Settings > Roles Management. Click any role in the list to view details such as permissions and users associated with the role in the right pane.
You can search the list of roles by entering a term in the field above the list. Or, filter the list by Permission, Environment, or User.
Within the Roles Management screen, you can edit, duplicate, temporarily deactivate, or permanently delete roles.
To manage roles:
Navigate to Settings > Roles Management. A list of existing roles appears.
Select the role you wish to edit, duplicate, or delete.
Use any of the following options to modify the role:
Option | Description |
|---|---|
Edit | a. Click Edit Role. b. In the Edit Role window, modify the role according to your needs. c. Click Update Role to save. |
Duplicate | a. Click the Duplicate button. b. In the Duplicate Role window, adjust the role settings and permissions as needed. c. Click Create Role to save. |
Delete | a. Click the Trash icon. b. Click Delete to confirm, or Cancel to return to the previous page. |
Roles and Resource Permissions
Access to resources can be limited or expanded using the View and Full Access permission access levels. See Access Levels for more information.
Permissions in BigPanda are sorted into three categories based on common BigPanda user types:
Account Administrator
Permission Name | resource_type | Access Level |
|---|---|---|
API Keys | apikeys | View, edit, and create API Keys in Settings. |
Audit Logs | audit_logs | View the Audit Log in both Settings and API. |
General Settings | general_settings | View and edit General Settings. |
Roles Management | roles | View, add, edit, and delete Roles in both the UI and Roles API. |
Sharing Quotas | quotas | View and edit Sharing Quota rate limitations in Settings. |
Single Sign-On | sso | View, select, and configure a Single Sign-On provider in Settings. |
Troubleshooting | troubleshooting | View event logs for specific Integrations. |
User Management | users | View, add, edit and delete Users in Settings and the SCIM Users API. |
Tool Architect
Permission Name | resource_type | Access Level |
|---|---|---|
AI Module Configuration | aia_configuration | View and edit AI module features for your organization. |
Alert Correlation | correlations | View, edit, and create new Correlation Patterns in Settings and API. |
Alert Enrichment | enrichments | View and use the Alert Enrichment UI and API. |
Alert Filtering & Planned Maintenance | plans | View, create, edit, and delete Maintenance Plans and Alert Filters in Settings, and use the Plans V1 API. |
Alert View Customization | alert_view | View, create, and edit Alert Views in Settings. |
AutoShare | notifications | View, add, edit, and delete AutoShare Rules in Settings. |
Incident Enrichment | incident-tags-definitions | View, create, and edit Incident Tags in Settings. |
Incident Feed View | incident_view | View, create, edit, or delete Incident Feed Views in Settings. |
Integrations | integrations | View, install, and edit integrations in the Integrations Tab. |
Manage Environments | environments | View, create, edit, and delete Environments in the UI and API, and view the incidents environments contain. See Environment Permissions for more information. |
Mapping Enrichment (API Only) | enrichments-jobs | Use the Mapping Enrichment API. |
Schedules (API Only) | schedules | View and use the Schedules API to define the specific start and end times of Plans configured with the Plans V1 API. |
Unified Analytics | analytics | View, edit, and create new dashboards in the Analytics Tab and assign the Dashboard Designer role. |
Incident Operator
Permission Name | resource_type | Access Level |
|---|---|---|
Dashboards | dashboards | View, customize, and interact with Dashboards. |
Root-Cause Changes | changes | View change details within an incident's Changes Tab and mark changes as Suspect or Match. |
Topology View | topology | View, upload, or edit topology maps via API, and view the Topology Tab in incident details. |
Unified Search | search | Access Unified Search. |
Environment Permissions
Environment permissions in BigPanda allow you to manage access to specific environments. To provide access to manage (create, delete, edit) all environments, assign the Environments permission with the Full Access level.
Environment permissions can be assigned during the role creation process. To add specific environment permissions, follow the steps to Create or Edit a role, and scroll to the Environment Permissions section.
Full access permissions
If you assigned the full access Environments permission to a role, a message will appear that says This Role has a permission to manage (create, delete, edit) all environments.
 |
Environment Permissions
The following permission types are available for environments:
Edit specific environment - Ability to edit the specified environment(s) or environment filters. Cannot create, duplicate, or delete environments.
Incident actions - Full access ability to perform actions on all enrichment tags and incidents (assign, snooze, share, comment), minus environment configuration in the specified environment(s).
View incidents - Read-only access to all enrichment tags and incidents in the specified environment(s) without the ability to change or perform any incident action.
Select environment(s) that you would like to assign access to from the drop down menus.
View only access
Users must have at least view-only access to at least one environment in order to log in and use the BigPanda UI.
Next Steps
Learn about user management in BigPanda
Learn about managing your personal account
Find your way around the BigPanda Settings page