Skip to content

Knowledge Base · Category 9

RBAC

6 articles · 1 with tutorial video

Role-based access control (RBAC) defines who may access TLSPilot and what they may do, both in the Desktop Admin console and in the WebUI. You connect RBAC either to Active Directory or the local users of the management host, or to Entra ID. You usually set this up in the Initial Setup Wizard, see chapter Authentication and access, but you can also set it up or change it at any time in the settings on the tab RBAC, see chapter Set up RBAC in the settings. Like the WebUI, RBAC is available from the Enterprise edition. Entra sign-in applies only to the WebUI.

Articles in this category

  1. 9.1

    Break-the-glass accounts

    All members of the local Administrators group on the management host always have full access to TLSPilot, even if they have no role.

  2. 9.2

    Roles

    TLSPilot supports the following roles:

  3. 9.3

    Assign roles

    Roles assigned in the RBAC Manager apply to TLSPilot overall and are called system roles.

    Tutorial 16
  4. 9.4

    Permissions for a single certificate

    The tab RBAC of a certificate, a deployment and a credential has the title Role-based Access Control and the same layout as the RBAC Manager: search, role and Add on one row, Remove below, and the users and groups as cards in one list.

  5. 9.5

    Permissions for credentials

    In the same way, you can define in the Credentials Manager who may use a credential.

  6. 9.6

    Set up RBAC in the settings

    If you skipped RBAC in the Initial Setup Wizard or clicked Later, set it up in the settings: