Teams
A team defines how an organization grants permissions for sensitive management and administrative operations to accounts, including user accounts and service accounts.
A team’s accounts have a shared responsibility for certain services. Chronosphere Observability Platform represents those services as collections, which contain resources related to the service a collection represents, such as dashboards and monitors. A team can own multiple collections.
All user and service accounts in a team that has the special System Administrator
(SysAdmin
) role are administrators. If you’re an administrator, you can
add this role to a team.
View teams
To search for a team:
- Click the search bar to focus on it, or use the keyboard shortcut Control+K (Command+K on macOS).
- Begin typing any part of the team’s name.
- Optional: Click the Teams filter at the top of the search results to constrain your results to only Teams.
- Click the desired search result, or use the arrow keys to select it and press enter, to go to that team.
View teams and their collections
To view teams and the collections they own, in the navigation menu exit the Admin menu (if needed, click Exit Admin) and select Collections. For details about working with collections, see Collections.
View a list of teams to manage
To view teams in a list that displays their members, provides an audit log of membership changes, and includes management options for administrators:
In the navigation menu, click Go to Admin and then select Platform > Teams.
For details, see Accounts and Teams.
Manage teams
To manage teams, you must use a user account or service account that belongs to a team with the SysAdmin role.
To manage teams, in the navigation menu, click Go to Admin and then select Platform > Teams.
Create a team
To create a new team:
- In the navigation menu, click Go to Admin and then select Platform > Teams.
- Click Create team.
- In the dialog that appears, enter a name for the new team and the access role it should have.
- Click Save to create the team.
The team now appears in the list of users and teams.
Edit team membership
To add users to or remove users from a team:
- In the navigation menu, click Go to Admin and then select Platform > Teams.
- Select the team to manage.
- Click Edit Team.
- In the Team Members section, click Update Membership.
- From the account list that appears, select the checkbox for each account you want to add to the team, and clear the checkbox for each account you want to remove from the team.
- Click Save to edit the team’s membership.
The team page updates its membership list accordingly, and the audit log adds an entry logging the operation.
Assign team roles and permissions
Observability Platform teams use roles to grant or restrict access to features that create, edit, or delete resources, teams, and accounts. Roles are assigned to teams, and all accounts that belong to a team gain the permissions granted by that team’s role.
During creation, accounts are assigned to the Default team, which has the Editor
role. The Default team can’t be deleted, and its role can’t be changed.
Service accounts
also can’t be removed from the Default team and therefore always have Editor
access.
To remove editing access from a user, remove the user from the Default team. This limits the user to read-only access provided they don’t have edit access through membership in another team.
The available roles are:
-
None
: Accounts on teams with this role can view pages in Observability Platform but can’t create, edit, or remove resources or accounts. Accounts that don’t belong to any team also have theNone
role by default. -
Editor
: Accounts on teams with this role can create, view, edit, and delete resources within Observability Platform, but can’t create, edit, or delete accounts and teams. -
SysAdmin
: Any account that’s a member of a team with the System Administrator (SysAdmin
) role can create, edit, and delete accounts and teams, assign accounts to teams, and assign roles to teams. Accounts with this role are designated by a key icon next to their name in the Users list. -
User Administrator
: Accounts belonging to teams with this role can access the System for Cross-domain Identity Management (SCIM) API, which manages accounts that use single sign-on. This role grants no other permissions.The
User Administrator
role can be assigned to teams only in organizations that have SCIM integration enabled. For more information, see Okta user synchronization.
If an account belongs to multiple teams with different roles, they inherit the highest-level
permissions of each assigned team. For example, an account on a team with the Editor
role and a second team with the SysAdmin
role has both sets of privileges.
The following chart summarizes roles and permissions:
Action | None | Editor | SysAdmin | User Admin |
---|---|---|---|---|
Interact with SCIM API | ||||
View pages in Observability Platform | ||||
Add and edit user and service accounts | ||||
Add, edit, and remove teams | ||||
Change users’ team membership | ||||
Apply service configuration changes | ||||
Add, edit, and remove trace control plane datasets | ||||
Add, edit, and remove derived labels | ||||
Add, edit, and remove other resources |
Add a role to a team
To add a role to a team:
- In the navigation menu, click Go to Admin and then select Platform > Teams.
- Select the team to manage.
- In the Team Information section, click Edit.
- Click the Role dropdown and select the role you want to assign to the team.
- Click Save.
Remove a role from a team
To remove a role from a team:
- In the navigation menu, click Go to Admin and then select Platform > Teams.
- Select the team to manage.
- In the Team Information section, click Edit.
- Click the Role dropdown and select the None role.
- Click Save.
Rename a team
To rename a team:
- In the navigation menu, click Go to Admin and then select Platform > Teams.
- Select the team to manage.
- In the Team Information section, click Edit.
- Change the team’s name in the Name field.
- Click Save.
Describe a team
Team pages can display a brief description in the Team Information section. You can use this description to clarify the team’s purpose, identify the people responsible for managing it, or provide general information or context to the team’s activities.
You can also add links to URLs, whether within or external to Observability Platform, to the Team Information section.
To access a team’s information:
- In the navigation menu, click Go to Admin and then select Platform > Teams.
- Select the team to manage.
- In the Team Information section, click Edit.
To add, edit, or remove a team’s description:
- Enter the team description in the Description field.
- Click Save.
To add links to a team’s information:
- In the Team Links section, click Add. This adds a row of fields to the section.
- Enter the link text in the Link Name field.
- Enter the link target in the URL field.
- Repeat these steps to add more links.
- Click Save.
To edit a team’s links:
- In the Team Links section, modify the link’s Link Name and URL fields.
- Click Save.
To remove links from a team’s information:
- In the Team Links section, click the delete button in the rows of the links you want to delete.
- Click Save.
Delete a team
Use one of the following methods to delete a team. The Default team can’t be deleted.
To delete a team:
- In the navigation menu, click Go to Admin and then select Platform > Teams.
- Select the team to delete.
- In the Team Information section, click Edit.
- Click Delete team.
- In the confirmation dialog that appears, click Delete.