Creating Policy Users

People sign in to Policy with named Protegrity Provisioned Cluster (PPC) accounts. The Policy Helm chart registers the built-in roles during installation. A PPC user with administrator permissions assigns these roles to people. Human accounts are separate from the integration service users prepared in prerequisites.

Prerequisites

Complete Policy installation before assigning its chart-created roles. Use a PPC account with administrator permissions to manage users.

Policy Roles

Choose the role required for the person’s tasks:

Use the authorization reference for capability details and policy-specific grants. Do not grant administrative access merely to provide author or read-only access.

Create a Policy User

Complete these steps in the PPC command-line interface (CLI):

1. Log in to the PPC CLI as a PPC user with administrator permissions. See Accessing the PPC CLI.

2. Create an author account:

   admin create users --username <username> --email <email> --first-name <first-name> --last-name <last-name> --password "<password>" --roles "policy_author"
   

   Replace the placeholders with the person’s account details. Run credential-setting commands in a protected CLI Manager session without command recording. For read-only access, use policy_viewer instead of policy_author.

3. List PPC users:

   admin list users
   

   The output includes the account you created.

For an existing user, follow PPC user management. Include every role the account must retain when changing its roles. Updating a user’s roles replaces the existing role list.