Split supports three roles to give users different permission levels in the Split UI:
Viewer - Users with the Viewer role are only allowed to view data and objects. They cannot modify any objects like feature flags or segments in the web console.
Editor - Users with the Editor role can modify objects like feature flags and segments. They also can approve or reject change requests.
Administrators - Administrators have full permissions. They can view and modify all objects in the web console. They also participate in approval decisions and perform all administrative responsibilities. For example, they can create new users or manage groups. Administrators are also the only users that can create and manage API and SDK keys.
Note: Administrators is a group that has been created for you. The first user in a new account is automatically added to the Administrators group. A user added to the Administrators group will have full administrator privileges, without regard for other role assignments.
Assigning user roles
The following sections explain how a user in the Administrators group can assign a role to other users.
Assigning an Editor or Viewer Role when creating a user
A role is assigned when creating a new user as described below.
- From the left navigation click the user's initials at the bottom and click the Invite menu item.
- Assign the Editor or Viewer role by selecting the role in the User role menu list. The Editor role is selected by default.
- Click the Invite button. The new user is created.
Creating a new user in the Administrators group
A new user can be created in the Administrators group as described below.
- From the left navigation click the Invite menu item.
- Add the user to the Administrators group by typing 'Administrators' in the Group text box.
- Click the Invite button. The new user is created.
Changing permissions of existing users by assigning the Editor or Viewer role
The Editor or a Viewer role can be assigned to an existing user by following the steps below.
In the left navigation, click the user's initials at the bottom, select Admin settings, and click Users. A list of users appears.
Find the desired user and click Edit.
Select the desired role from the User role menu list.
- Click the Save button. The new role will be assigned to the user.
Adding an existing user to the Administrators group
An existing user can be added to the Administrators group as described below.
In the left navigation, click the user's initials at the bottom and select Admin settings.
Click Groups and in the Action column, click View in the Administrators group.
Select an existing user and click Add member. A new member is added.
About object-level edit permissions
For a user that is not in the Administrators group, object-level edit permissions previously granted will no longer be honored once the user is switched to the Viewer role. In other words, even if the user still appears in object-level edit permissions (Feature flag, Segment, or Metric owners), Environment settings (in the list of editors and approvers), or Feature flag change requests (in the list of approvers), the user will only be able to view any of those objects, and will not be able to edit them.
About audit logging
A change in the role assignment for a user (e.g. from Editor to Viewer) is tracked in the Admin audit logs (under Admin settings, Security). Viewing behavior of a Viewer user is not captured in audit logs.
Comments
0 comments
Please sign in to leave a comment.