Roles for access are assigned through EWC IAM. Please check EWC Service Related Roles page here.
Regarding the specific roles for the secret manager, please refer to the table below:
| ewc-app-admin | ewc-app-maintainer | ewc-app-user | |
|---|---|---|---|
| Policy | Create, Read, Update | Read | - |
| AppRole | Create, Read, Update, Delete | Create, Read, Update, Delete | - |
| Secret Engine/Mount | Create, Read, Update, Delete | Create, Read, Update | Read |
| Secret | Create, Read, Update, Delete | Create, Read, Update, Delete | Read |
| Namespace | Create, Read, Update, Delete | Read | ? |
| Group | Create, Read, Update, Delete | Read | ? |
| Authentication Method | Create, Read, Update, Delete | - | ? |