Fuzzball Entity Management
Fuzzball uses the following entities to control access to deployments, resources, and workflows:
- Organizations are used to manage a collection of users and accounts.
- Accounts are used to control users’ access to resources such as storage volume, secrets, and compute resource definitions. This entity enables its member to see each other’s workflows.
- Users are the entity which creates and runs workflows. This entity has the ability to create resources at the user scope. This entity can also create resources at the account scope if it is the account owner.
For more information on the entities, their roles, and permissions, please refer to the roles and permissions page.
The following sections will dive into the details of administering these entities and roles.
Before adding users to your organization, it is important to ensure that the Keycloak service running as part of Orchestrate is configured correctly. The Keycloak Configuration guide covers the essential one-time setup steps needed to secure user authentication and password management.