A2oz

How Do I Create Role-Based Access in Jenkins?

Published in Jenkins 2 mins read

Role-Based Access Control (RBAC) in Jenkins allows you to manage user permissions and control access to various resources. This ensures security and prevents unauthorized actions.

Here's how to create role-based access in Jenkins:

1. Install the Role Strategy Plugin:

  • Navigate to Manage Jenkins > Manage Plugins.
  • Go to the Available tab and search for "Role Strategy Plugin."
  • Select the plugin and click Install without restart.

2. Configure Global Security:

  • Go to Manage Jenkins > Configure Global Security.
  • Under Authorization, choose Role-Based Strategy.
  • Click Save.

3. Create Roles:

  • Go to Manage Jenkins > Manage and Assign Roles.
  • Click New Role.
  • Give the role a descriptive name (e.g., "Developer", "Tester", "Admin").
  • Assign permissions to the role:
    • Global permissions: Define general access levels like "Read," "Configure," "Administer," etc.
    • Project permissions: Control specific actions for particular projects like "Read," "Build," "Configure," etc.
    • Slave permissions: Manage slave nodes, including "Connect," "Start," "Stop," etc.
  • Click Save.

4. Create Users and Assign Roles:

  • Go to Manage Jenkins > Manage Users.
  • Click Create User.
  • Enter a username, password, and email address.
  • Click Create User.
  • Assign the appropriate role to the newly created user:
    • Go to Manage Jenkins > Manage and Assign Roles.
    • Click Assign Roles.
    • Select the user and the role you want to assign.
    • Click Assign.

Example:

  • A role named "Developer" can be created with "Read" and "Build" permissions on a specific project, allowing developers to access and build the project.
  • Another role named "Tester" can have "Read" and "Execute" permissions on the same project, enabling testers to run tests.

Conclusion:

By following these steps, you can effectively implement role-based access control in Jenkins, enhancing security and ensuring only authorized users have access to specific resources.

Related Articles