managing-model-registry-permissions.adoc

Managing model registry permissions

You can manage access to a model registry for individual users and user groups in your organization, and for service accounts in a project.

{productname-short} creates the <model-registry-name>-users group automatically for use with model registries. You can add users to this group in OpenShift, or ask the cluster admin to do so.

Prerequisites

• You have logged in to {productname-short} as a user with {productname-short} administrator privileges.

• An available model registry exists in your deployment.

• The users and groups that you want to provide access to already exist in {openshift-platform}. For more information, see Managing users and groups.

Procedure

1. From the {productname-short} dashboard, click Settings → Model registry settings.

2. Click Manage permissions beside the model registry that you want to manage access for.

   The permissions page for the model registry opens.

3. Provide one or more OpenShift groups with access to the project.

   1. On the Users tab, in the Groups section, click Add group.

   2. From the Select a group drop-down list, select a group.

      Note	To enable access for all cluster users, add system:authenticated to the group list.

   3. To confirm your entry, click Confirm ().

   4. Optional: To add an additional group, click Add group and repeat the process.

4. Provide one or more users with access to the model registry.

   1. On the Users tab, in the Users section, click Add user.

   2. In the Type username field, enter the username of the user to whom you want to provide access.

   3. To confirm your entry, click Confirm ().

   4. Optional: To add an additional user, click Add user and repeat the process.

5. Provide all service accounts in a project with access to the model registry.

   1. On the Projects tab, in the Projects section, click Add project.

   2. In the Select or enter a project field, select or enter the name of the project to which you want to provide access.

   3. To confirm your entry, click Confirm ().

   4. Optional: To add an additional project, click Add project and repeat the process.

Verification

• Users, groups, and accounts that were granted access to a model registry can register, view, edit, version, deploy, delete, archive, and restore models in that registry.

• The Users and Groups sections on the Permissions tab show the respective users and groups that you granted access to the model registry.

• The Projects sections on the Projects tab show the projects that you granted access to the model registry.