User, group, and permissions management
Nautobot allows for an extensive role-based access system. Roles are managed by assigning permissions either to groups and assigning users to be members of those groups, or by assigning permissions directly to the users. All of the permissions that are granted to the user’s groups and directly to the user will be used when determining authorization to perform operations, such as viewing or editing, on objects or views.
Before we work with the power of the permissions framework, let’s start by creating users and groups beyond what was set up when we installed Nautobot in Chapter 3.
Groups
How you choose to define groups will largely come down to how you plan to group the activities your users will perform. Do you have an operations team who are allowed to view data and run diagnostics but cannot change data directly? Or do you have separate teams managing DCIM versus IPAM-centric data? Ultimately, the choice is up to you...
