+++ title = "Manage Roles" draft = false gh_repo = "chef-web-docs" robots = "noindex" aliases = ["/server_manage_roles.html"] product = []
[menu] [menu.legacy] title = "Roles" identifier = "legacy/manage/server_manage_roles.md Roles" parent = "legacy/manage" +++
{{< chef_automate_mark >}}
{{< warning >}}
{{< readfile file="content/reusable/md/EOL_manage.md" >}}
This document is no longer maintained.
{{< /warning >}}
{{< note >}}
This topic is about using the Chef management console to manage roles.
{{< /note >}}
{{< readfile file="content/reusable/md/role.md" >}}
Roles can be managed from the Chef management console web user interface.
To add a role:
-
Open the Chef management console.
-
Click Policy.
-
Click Roles.
-
Click Create.
-
In the Create Role dialog box, enter the name of the role and a description.
Click Next.
-
Optional. Build the run-list from the list of available roles and recipes:
Click Next.
-
Optional. Add default attributes as JSON data:
Click Next.
-
Optional. Add override attributes as JSON data:
-
Click Create Role.
To delete a role:
To view all roles uploaded to the Chef Infra Server organization:
- Open the Chef management console.
- Click Policy.
- Click Roles.
{{< readfile file="content/reusable/md/node_run_list.md" >}}
To edit the run-list for a role:
-
Open the Chef management console.
-
Click Policy.
-
Click Roles.
-
Select a role.
-
Click Edit Run List.
-
Make your changes.
-
Click Save Run List.
{{< readfile file="content/reusable/md/node_attribute_type_default.md" >}}
To edit default attributes for a role:
-
Open the Chef management console.
-
Click Policy.
-
Click Roles.
-
Select a role.
-
Click the Attributes tab.
-
Under Default Attributes, click Edit.
-
In the Edit Role Attributes dialog box, enter the JSON data that defines the attribute (or attributes).
-
Click Save Attributes.
To view default attributes for a role:
- Open the Chef management console.
- Click Policy.
- Click Roles.
- Select a role.
- Click the Attributes tab.
{{< readfile file="content/reusable/md/node_attribute_type_override.md" >}}
To edit override attributes for a role:
-
Open the Chef management console.
-
Click Policy.
-
Click Roles.
-
Select a role.
-
Click the Attributes tab.
-
Under Override Attributes, click Edit.
-
In the Edit Role Attributes dialog box, enter the JSON data that defines the attribute (or attributes).
-
Click Save Attributes.
To view role details:
- Open the Chef management console.
- Click Policy.
- Click Roles.
- Select a role.
- Click the Details tab.
{{< readfile file="content/server/reusable/md/server_rbac_permissions.md" >}}
{{< readfile file="content/server/reusable/md/server_rbac_permissions_object.md" >}}
To set permissions list for a role object:
- Open the Chef management console.
- Click Policy.
- Click Roles.
- Select a role.
- Click the Permissions tab.
- For each group listed under Name, select or de-select the Read, Update, Delete, and Grant permissions.
To update the permissions list for a role object:
- Open the Chef management console.
- Click Policy.
- Click Roles.
- Select a role.
- Click the Permissions tab.
- Click the + Add button and enter the name of the user or group to be added.
- Select or de-select Read, Update, Delete, and Grant to update the permissions list for the user or group.
To view permissions for a role object:
- Open the Chef management console.
- Click Policy.
- Click Roles.
- Select a role.
- Click the Permissions tab.
- Set the appropriate permissions: Delete, Grant, Read, and/or Update.