Add Role
Overview
The Add Role page is used to create a new role within Catalog IAM.
A role represents a reusable collection of one or more policies. Instead of assigning policies directly to users or groups, policies are grouped into roles, which can later be assigned to principals through bindings.
Creating reusable roles simplifies authorization management and ensures consistent permission assignments across the catalog.
Creating a Role
To create a new role:
- Enter a unique Name for the role.
- (Optional) Provide a Description explaining the purpose of the role.
- Select one or more Policies to include in the role.
- Choose whether the role should be Active.
- Click Save to create the role.
Click Cancel to close the panel without saving any changes.
Role Information
The form contains the following fields:
| Field | Description |
|---|---|
| Name | The unique name used to identify the role. |
| Description | Optional information describing the role's purpose. Maximum length is 200 characters. |
| Policies | Displays the list of available policies that can be assigned to the role. Multiple policies may be selected. |
| Show Only Unselected | Displays only policies that have not yet been selected. |
| Is Active | Determines whether the role is immediately available for authorization assignments after it is created. |
Policy Selection
The Policies section allows administrators to search and select the policies that will become part of the role.
Multiple policies can be assigned to the same role, allowing related authorization rules to be grouped together into a reusable permission set.
Validation
The following validation rules apply when creating a role:
- Name is required.
- The role name must be unique within Catalog IAM.
- At least one policy should be assigned before the role is used in authorization assignments.
Access Requirements
This page is available only to users with Administrator privileges.
Only administrators can create and manage Catalog IAM roles. Non-administrator users cannot access this page.
Users without administrator privileges will receive the following authorization error:
Access Denied
You don't have access to this resource.