openshift/openshift-docs
1
0
Fork 0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-05 21:46:22 +01:00
Code Issues Releases Activity

Added information about the dedicated-admin role

Browse Source
This commit is contained in:
Andrew Taylor
2020-03-06 16:42:41 -05:00
committed by openshift-cherrypick-robot
parent 7e79793405
commit faa5df5400
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
modules/dedicated-managing-service-accounts.adoc
View File

@@ -9,6 +9,24 @@ Service accounts are API objects that exist within each project. To manage
service accounts, you can use the `oc` command with the `sa` or `serviceaccount`
object type or use the web console.
The *dedicated-admin* service creates the *dedicated-admins* group. This group is
granted the roles at the cluster or individual project level. Users can be
assigned to this group and group membership defines who has OpenShift Dedicated
administrator access. However, by design, service accounts cannot be added to
regular groups.
Instead, the dedicated-admin service creates a special project for this purpose
named *dedicated-admin*. The service account group for this project is granted
OpenShift Dedicated *admin* roles, granting OpenShift Dedicated administrator
access to all service accounts within the *dedicated-admin* project. These service
accounts can then be used to perform any actions that require OpenShift
Dedicated administrator access.
Users that are members of the *dedicated-admins* group, and thus have been granted
the *dedicated-admin* role, have `edit` access to the *dedicated-admin* project. This
allows these users to manage the service accounts in this project and create new
ones as needed.
To get a list of existing service accounts in the current project, run:
----