Roles and permissions for App Connect Designer on Red Hat® OpenShift®

In IBM® App Connect Operator 11.0.0 or later, IAM is implemented by using Keycloak to validate user identities and grant access. For information about configuring IAM, creating users, and assigning roles, see Implementing identity and access management for App Connect Designer and App Connect Dashboard instances.

The following role can be assigned to a Designer instance: designerauthoring-admin.

In IBM App Connect Operator 10.1.1 or earlier, you can control access to your App Connect Designer instances by using the IAM service that IBM Cloud Pak foundational services 3.19.x or later 3.x.x provides.

Authority to use an App Connect Designer instance is determined by the user's authority for the namespace that contains the instance. The relation between user authority and namespace is as follows:

1. The App Connect Designer instance is created in a namespace.
2. The namespace is a resource to which an IAM team can be granted access.
3. The IAM team consists of users and each user has an assigned role.
4. Each user role has a specified authority.