Roles Module
Overview
The Roles Module is responsible for managing reusable authorization roles within Catalog IAM.
A role represents a collection of one or more policies that can be assigned to users or groups through bindings. Instead of assigning individual policies directly to principals, administrators can organize related policies into reusable roles.
This approach simplifies permission management, improves consistency, and makes authorization easier to maintain across the catalog.
Role Management
This page displays all roles defined within Catalog IAM.
From this interface, administrators can perform the following actions:
- View all existing roles.
- Search roles using the centralized search field.
- Filter and sort role records using the available table controls.
- Switch between list and card views.
- Create a new role using the Add Role button.
- Review each role's description, creation date, update date, and current status.
-
Open the action menu (
...) to manage an existing role.
Role Information
Each role record contains the following information:
| Field | Description |
|---|---|
| Name | The unique name used to identify the role within Catalog IAM. |
| Description | Additional information describing the purpose of the role. |
| Create Date | The date and time when the role was created. |
| Update Date | The date and time when the role was last modified. |
| Status |
Indicates whether the role is currently
Active or
Inactive.
|
Role Composition
A role may contain one or more policies.
Policies define authorization rules, while roles group those policies into reusable permission sets that can later be assigned through bindings.
This separation allows the same policy to be reused across multiple roles while keeping authorization management simple and centralized.
Key Considerations
- Roles do not define permissions directly; permissions are provided through the policies assigned to the role.
- A role may contain multiple policies.
- The same policy can be reused in multiple roles.
- Roles become effective only after they are assigned to users or groups through bindings.
- Disabling a role prevents it from being used in authorization assignments.
- Changes made to a role may affect every binding that references it.
Access Requirements
This page is available only to users with Administrator privileges.
Only administrators can view and manage Catalog IAM roles. Non-administrator users cannot access this page.
Users without administrator privileges will receive the following authorization error:
Access Denied
You don't have access to this resource.