OBSERVABILITY PLATFORM
Teams

Teams

A team defines how an organization grants permissions for sensitive management and administrative operations to accounts, including user accounts and service accounts.

A team's accounts have a shared responsibility for certain services. Chronosphere Observability Platform represents those services as collections, which contain resources related to the service a collection represents, such as dashboards and monitors. A team can own multiple collections.

All user and service accounts in a team that has the special System Administrator (SysAdmin) role are administrators. If you're an administrator, you can add this role to a team.

View teams

To search for a team:

  1. Click the search bar to focus on it, or use the keyboard shortcut Control+K (Command+K on macOS).
  2. Begin typing any part of the team's name.
  3. Optional: Click the Teams filter at the top of the search results to constrain your results to only Teams.
  4. Click the desired search result, or use the arrow keys to select it and press enter, to go to that team.

View teams and their collections

To view teams and the collections they own, in the navigation menu exit the Admin menu (if needed, click Exit Admin) and select Collections. For details about working with collections, see Collections.

View a list of teams to manage

To view teams in a list that displays their members, provides an audit log of membership changes, and includes management options for administrators:

In the navigation menu, click Go to Admin and then select Platform > Teams.

For details, see Accounts and Teams.

Manage teams

To manage teams, you must use a user account or service account that belongs to a team with the SysAdmin role.

To manage teams, in the navigation menu, click Go to Admin and then select Platform > Teams.

Create a team

To create a new team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Click Create team.
  3. In the dialog that appears, enter a name for the new team and the access role it should have.
  4. Click Save to create the team.

The team now appears in the list of users and teams.

Edit team membership

To add users to or remove users from a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. In the Team Members section, click Update Membership.
  5. From the account list that appears, select the checkbox for each account you want to add to the team, and clear the checkbox for each account you want to remove from the team.
  6. Click Save to edit the team's membership.

The team page updates its membership list accordingly, and the audit log adds an entry logging the operation.

Add a role to a team

Observability Platform teams use roles to grant or restrict access. During creation, users are assigned to the Default team, which has the Editor role.

The available roles are:

  • Sysadmin: Any account that's a member of a team with the System Administrator (SysAdmin) role can create user and service accounts, assign them to teams, and define team permissions. Teams and users with this role have a padlock icon () next to their name in the Users & Teams list.

  • User Administrator: Users belonging to teams with this permission can update user accounts.

  • Editor: Users on teams with the Editor role can create entities within Observability Platform, but can't update user accounts.

    Service accounts can't be removed from the Default team.

If a user belongs to multiple teams with different permissions, they inherit the highest level permissions of each assigned team. For example, a user on a team with Editor and a second team with User Administrator permissions has both sets of privileges. All users have at least view access.

The following chart summarizes roles and permissions:

ActionUser AdminViewerEditorSystem Admin
Interact with SCIM API
View pages in Observability Platform
Add and edit users
Add, edit, and remove teams
Add, edit, and remove collections
Add, edit, and remove notification policies
Add, edit, and remove dashboards

Observability Platform assigns users to the Default team during provisioning, which grants them the Editor role. Edit the Default team to remove the user. This makes the user read-only provided they don't have edit access through membership in another team.

Users on teams with the User Administrator role can make changes to the Okta integration.

To add a role to a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. In the Role section, select the role with the appropriate permissions to add.
  5. Click Save.

Remove a role from a team

To remove a role from a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. In the Role section, select a role with less permissions for the team.
  5. Click Save.

Rename a team

To rename a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. Change the name in the Team Name field.
  5. Click Save.

Delete a team

Use one of the following methods to delete a team. The Default team can't be deleted.

To delete a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to delete.
  3. Click Edit Team.
  4. Click Delete team.
  5. In the confirmation dialog that appears, click Delete.