OBSERVABILITY PLATFORM
Teams

Teams

A team defines how an organization grants permissions for sensitive management and administrative operations to accounts, including user accounts and service accounts.

A team’s accounts have a shared responsibility for certain services. Chronosphere Observability Platform represents those services as collections, which contain resources related to the service a collection represents, such as dashboards and monitors. A team can own multiple collections.

All user and service accounts in a team that has the special System Administrator (SysAdmin) role are administrators. If you’re an administrator, you can add this role to a team.

View teams

To search for a team:

  1. Click the search bar to focus on it, or use the keyboard shortcut Control+K (Command+K on macOS).
  2. Begin typing any part of the team’s name.
  3. Optional: Click the Teams filter at the top of the search results to constrain your results to only Teams.
  4. Click the desired search result, or use the arrow keys to select it and press enter, to go to that team.

View teams and their collections

To view teams and the collections they own, in the navigation menu exit the Admin menu (if needed, click Exit Admin) and select Collections. For details about working with collections, see Collections.

View a list of teams to manage

To view teams in a list that displays their members, provides an audit log of membership changes, and includes management options for administrators:

In the navigation menu, click Go to Admin and then select Platform > Teams.

For details, see Accounts and Teams.

Manage teams

To manage teams, you must use a user account or service account that belongs to a team with the SysAdmin role.

To manage teams, in the navigation menu, click Go to Admin and then select Platform > Teams.

Create a team

To create a new team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Click Create team.
  3. In the dialog that appears, enter a name for the new team and the access role it should have.
  4. Click Save to create the team.

The team now appears in the list of users and teams.

Edit team membership

To add users to or remove users from a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. Click Edit Team.
  4. In the Team Members section, click Update Membership.
  5. From the account list that appears, select the checkbox for each account you want to add to the team, and clear the checkbox for each account you want to remove from the team.
  6. Click Save to edit the team’s membership.

The team page updates its membership list accordingly, and the audit log adds an entry logging the operation.

Assign team roles and permissions

Observability Platform teams use roles to grant or restrict access to features that create, edit, or delete resources, teams, and accounts. Roles are assigned to teams, and all accounts that belong to a team gain the permissions granted by that team’s role.

During creation, accounts are assigned to the Default team, which has the Editor role. The Default team can’t be deleted, and its role can’t be changed. Service accounts also can’t be removed from the Default team and therefore always have Editor access.

To remove editing access from a user, remove the user from the Default team. This limits the user to read-only access provided they don’t have edit access through membership in another team.

The available roles are:

  • None: Accounts on teams with this role can view pages in Observability Platform but can’t create, edit, or remove resources or accounts. Accounts that don’t belong to any team also have the None role by default.

  • Editor: Accounts on teams with this role can create, view, edit, and delete resources within Observability Platform, but can’t create, edit, or delete accounts and teams.

  • SysAdmin: Any account that’s a member of a team with the System Administrator (SysAdmin) role can create, edit, and delete accounts and teams, assign accounts to teams, and assign roles to teams. Accounts with this role are designated by a key icon next to their name in the Users list.

  • User Administrator: Accounts belonging to teams with this role can access the System for Cross-domain Identity Management (SCIM) API, which manages accounts that use single sign-on. This role grants no other permissions.

    The User Administrator role can be assigned to teams only in organizations that have SCIM integration enabled. For more information, see Okta user synchronization.

If an account belongs to multiple teams with different roles, they inherit the highest-level permissions of each assigned team. For example, an account on a team with the Editor role and a second team with the SysAdmin role has both sets of privileges.

The following chart summarizes roles and permissions:

ActionNoneEditorSysAdminUser Admin
Interact with SCIM API
View pages in Observability Platform
Add and edit user and service accounts
Add, edit, and remove teams
Change users’ team membership
Apply service configuration changes
Add, edit, and remove trace control plane datasets
Add, edit, and remove derived labels
Add, edit, and remove other resources

Add a role to a team

To add a role to a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. In the Team Information section, click Edit.
  4. Click the Role dropdown and select the role you want to assign to the team.
  5. Click Save.

Remove a role from a team

To remove a role from a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. In the Team Information section, click Edit.
  4. Click the Role dropdown and select the None role.
  5. Click Save.

Rename a team

To rename a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. In the Team Information section, click Edit.
  4. Change the team’s name in the Name field.
  5. Click Save.

Describe a team

Team pages can display a brief description in the Team Information section. You can use this description to clarify the team’s purpose, identify the people responsible for managing it, or provide general information or context to the team’s activities.

You can also add links to URLs, whether within or external to Observability Platform, to the Team Information section.

To access a team’s information:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to manage.
  3. In the Team Information section, click Edit.

To add, edit, or remove a team’s description:

  1. Enter the team description in the Description field.
  2. Click Save.

To add links to a team’s information:

  1. In the Team Links section, click Add. This adds a row of fields to the section.
  2. Enter the link text in the Link Name field.
  3. Enter the link target in the URL field.
  4. Repeat these steps to add more links.
  5. Click Save.

To edit a team’s links:

  1. In the Team Links section, modify the link’s Link Name and URL fields.
  2. Click Save.

To remove links from a team’s information:

  1. In the Team Links section, click the delete button in the rows of the links you want to delete.
  2. Click Save.

Delete a team

Use one of the following methods to delete a team. The Default team can’t be deleted.

To delete a team:

  1. In the navigation menu, click Go to Admin and then select Platform > Teams.
  2. Select the team to delete.
  3. In the Team Information section, click Edit.
  4. Click Delete team.
  5. In the confirmation dialog that appears, click Delete.