Roles for access are assigned through EWC IAM. Please check EWC Service Related Roles page here.
Regarding the specific roles for the secret manager, please refer to the table below:
| ewc-app-admin | ewc-app-maintainer | ewc-app-user | |
|---|---|---|---|
| AppRole | Create, Read, Update, Delete, List, sudo | Create, Read, Update, Delete, List | Read, List |
| Authentication Method | Create, Read, Update, Delete, List, sudo | Read, List | Read, List |
| Group | Create, Read, Update, Delete, List, sudo | Read, List | Read, List |
| Namespace | Create, Read, Update, Delete, List, sudo | Read, List | Read, List |
| Policy | Create, Read, Update, Delete, List, sudo | - | - |
| Secret Engine/Mount | Create, Read, Update, Delete, List, sudo | Create, Read, Update, Delete, List | Read, List |
| Secret | Create, Read, Update, Delete, List, sudo | Create, Read, Update, Delete, List | Read, List |