Observability permission description¶
The observability module uses the following roles:
- Admin / Kpanda Owner
- Cluster Admin
- NS Admin / NS Edit
- NS View
The permissions of each role are as follows:
| Menu | Operation | Admin / Kpanda Owner | Cluster Admin | NS Admin / NS Edit | NS View |
|---|---|---|---|---|---|
| Overview | View Overview | ✓ | ✗ | ✗ | ✗ |
| Dashboard | View Dashboard | ✓ | ✗ | ✗ | ✗ |
| Scenario Monitoring | View Cluster Monitoring | ✓ | ✓ | ✗ | ✗ |
| View node monitoring | ✓ | ✓ | ✗ | ✗ | |
| View container monitoring | ✓ | ✓ | ✓ | ✓ | |
| View Service Monitoring | ✓ | ✓ | ✓ | ✓ | |
| View Topology | ✓ | ✓ | ✓ | ✓ | |
| Metric Query | Query Node Metrics - Common | ✓ | ✓ | ✗ | ✗ |
| Query Workload Metrics - Normal | ✓ | ✓ | ✓ | ✓ | |
| Query Metrics - Advanced | ✓ | ✓ | ✓ | ✓ | |
| Log query | Query cluster event logs | ✓ | ✓ | ✗ | ✗ |
| Query node logs | ✓ | ✓ | ✗ | ✗ | |
| Query container logs | ✓ | ✓ | ✓ | ✓ | |
| trace query | query trace | ✓ | ✓ | ✓ | ✓ |
| alert List | View alert Events | ✓ | ✓ | ✓ | ✓ |
| Alert Rules | Create Metric Template Rule - Workload | ✓ | ✓ | ✓ | ✗ |
| Create metric Template Rule - Node | ✓ | ✓ | ✗ | ✗ | |
| Modify Metric Template Rule - Workload | ✓ | ✓ | ✓ | ✗ | |
| Modify metric Template Rules - Node | ✓ | ✓ | ✗ | ✗ | |
| View Metric Template Rules - Workload | ✓ | ✓ | ✓ | ✓ | |
| View metric Template Rules - Node | ✓ | ✓ | ✗ | ✗ | |
| Create promQL rules | ✓ | ✓ | ✓ | ✗ | |
| Modify promQL rules | ✓ | ✓ | ✓ | ✗ | |
| Delete custom alert rule | ✓ | ✓ | ✓ | ✗ | |
| View built-in alert rules | ✓ | ✗ | ✗ | ✗ | |
| Modify built-in alert rules | ✓ | ✗ | ✗ | ✗ | |
| Who to Notify | View Who to Notify | ✓ | ✓ | ✓ | ✓ |
| Add notification object | ✓ | ✗ | ✗ | ✗ | |
| Modify notification object | ✓ | ✗ | ✗ | ✗ | |
| delete notification object | ✓ | ✗ | ✗ | ✗ | |
| View message templates | ✓ | ✓ | ✓ | ✓ | |
| Add Message Template | ✓ | ✗ | ✗ | ✗ | |
| Modify Message Template | ✓ | ✗ | ✗ | ✗ | |
| Delete Message Template | ✓ | ✗ | ✗ | ✗ | |
| Collection Management | View Agent List | ✓ | ✓ | ✓ | ✓ |
| Install/Uninstall Agent | ✓ | ✓ | ✓ | ✓ | |
| View Agent Details | ✓ | ✓ | ✓ | ✓ | |
| System Configuration | View System Configuration | ✓ | ✗ | ✗ | ✗ |
For more information on permissions, see Container Management Permissions Description.
For creating, managing, and deleting roles, see Role and Permission Management.