Administer
Accounts and teams
Teams

Teams

A team defines how an organization grants permissions for sensitive management and administrative operations to accounts, including user accounts and service accounts.

A team's accounts have a shared responsibility for certain services. Chronosphere represents those services as collections, which contain resources related to the service a collection represents, such as dashboards and monitors. A team can own multiple collections.

All user and service accounts in a team that has the special System Administrator (SysAdmin) role are administrators. If you're an administrator, you can add this role to a team.

View teams

To search for a team:

  1. Click the search bar to focus on it, or use the keyboard shortcut Control+K (Command+K on macOS).
  2. Begin typing any part of the team's name.
  3. Optional: Click the Teams filter at the top of the search results to constrain your results to only Teams.
  4. Click the desired search result, or use the arrow keys to select it and press enter, to go to that team.

View teams and their collections

To view teams and the collections they own, go to Collections. For details on working with collections, see Collections.

View a list of teams to manage

To view teams in a list that displays their members, provides an audit log of membership changes, and includes management options for administrators:

To view teams, you must have administrative privileges.

In the navigation menu, click Go to Admin and then select Platform > Teams.

For details, see Accounts and Teams.

Manage teams

To manage teams, you must use a user account or service account that belongs to a team with the SysAdmin role.

To manage teams, in the navigation menu, click Go to Admin and then select Platform > Teams.

Create a team

To create a new team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Click Create team.
  3. In the dialog that appears, enter a name for the new team and the access role it should have.
  4. Click Save to create the team.

The team now appears in the list of users and teams.

Edit team membership

To add users to or remove users from a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. In the Team Members section, click Update Membership.
  5. From the account list that appears, select the checkbox for each account you want to add to the team, and clear the checkbox for each account you want to remove from the team.
  6. Click Save to edit the team's membership.

The team page updates its membership list accordingly, and the audit log adds an entry logging the operation.

Add a role to a team

This feature isn't available to all Chronosphere users and might not be visible in your app. For information about enabling this feature in your environment, contact Chronosphere Support.

Chronosphere teams use roles to grant or restrict access. The available roles are:

  • Sysadmin: Any account that's a member of a team with the System Administrator (SysAdmin) role can create user and service accounts, assign them to teams, and define team permissions. Teams and users with this role have a padlock icon () next to their name in the Users & Teams list.
  • User Administrator: Users belonging to teams with this permission can update user accounts.
  • Editor: Users on teams with the Editor role can create entities within Chronosphere, but can't update user accounts. This role is used as a default during some migrations to single sign-on. Chronosphere strongly recommends against deleting this role.
  • Viewer: Users on teams with the Viewer role can view entities, but can't create, change, or delete users or entities.

If a user belongs to multiple teams with different permissions, they inherit the highest level permissions of each assigned team. Users without a team assignment have Viewer privileges. For example, a user on a team with Editor and a second team with User Administrator permissions has both sets of privileges.

If a user belongs to no teams, they inherit viewer permissions.

The following chart summarizes roles and permissions:

ActionUser AdminViewerEditorSystem Admin
Interact with SCIM API Yes No No No
View pages in Chronosphere No Yes Yes Yes
Add and edit users No No No Yes
Add, edit, and remove teams No No No Yes
Add, edit, and remove collections No No Yes Yes
Add, edit, and remove notification policies No No Yes Yes
Add, edit, and remove dashboards No No Yes Yes

Chronosphere assigns users to the default team during provisioning, which grants them the Editor role. To change their privileges, you must edit the team to remove the user from the Editors team, and assign them to a team with None (View-only) permissions.

Users on teams with the User Administrator role can make changes to the Okta integration.

To add a role to a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. In the Role section, select the role with the appropriate permissions to add.
  5. Click Save.

Remove a role from a team

To remove a role from a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. In the Role section, select a role with less permissions for the team.
  5. Click Save.

Rename a team

To rename a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. Change the name in the Team Name field.
  5. Click Save.

Delete a team

To delete a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to delete.
  3. Click Edit Team.
  4. Click Delete team.
  5. In the confirmation dialog that appears, click Delete.
Service accountsOkta user synchronization