Restricting Namespace-Level Access for User Groups in SaaS.

[Vikas_g1997]

Hi Team,
I’m working with a customer who needs to set permissions so that users can view and access details for specific namespaces within a cluster, including their services and related issues.
For example:

• Team 1 (User Group) should only be able to see namespaces 1, 2, and 3.
• Team 2 should only be able to see namespaces 4, 5, and 6.

Additionally, they do not want these teams to see each other’s namespaces or services.
Is there a way to achieve this in SaaS?
Regards,
Vikas A goud

[AntonPineiro]

Hi,

Have a look to Policy boundaries. You have namespaces examples there.

Best regards

[Georgi_Vuldzhev]

We have similar situation and what we did was to create a separate management zone and assign just the necessary namespaces to it. And then we created a role that has view rights over this management zone + one that has edit rights as well, to modify the settings.

By doing this we now have:
1 MZ that has access to the whole cluster and they see and can edit settings for all namespaces
1 MZ that contains just some namespaces - with two roles - one read only and one with edin rights over settings.

I hope this helps.