Skip to main content
Version: V2-Next

Access Control

Add-onsAdd-onAn optional component that extends the Platform for specific use cases, for example for visualization or low-code data processing. An Add-on is not part of the platform core: it is maintained in a separate repository, included in the deployment as a Git submodule, and accesses the Platform only via its public interfaces. integrate with the platform's KeycloakKeycloakAn open-source Identity and Access Management (IAM) solution providing SSO and OAuth2/OpenID Connect flows. In CIVITAS/CORE it is used to authenticate users and issue JWTs. IDM but are not managed through the portal. Roles must be assigned manually via the KeycloakKeycloakAn open-source Identity and Access Management (IAM) solution providing SSO and OAuth2/OpenID Connect flows. In CIVITAS/CORE it is used to authenticate users and issue JWTs. admin console.

Apache Superset​

Apache Superset is used like an Add-onAdd-onAn optional component that extends the Platform for specific use cases, for example for visualization or low-code data processing. An Add-on is not part of the platform core: it is maintained in a separate repository, included in the deployment as a Git submodule, and accesses the Platform only via its public interfaces. but is shipped with the CIVITAS/CORE deployment (see Available Add-ons). Users log in to Superset via single sign-on. The Superset role is derived from the user's KeycloakKeycloakAn open-source Identity and Access Management (IAM) solution providing SSO and OAuth2/OpenID Connect flows. In CIVITAS/CORE it is used to authenticate users and issue JWTs. realm roles at every login.

KeycloakKeycloakAn open-source Identity and Access Management (IAM) solution providing SSO and OAuth2/OpenID Connect flows. In CIVITAS/CORE it is used to authenticate users and issue JWTs. realm roleSuperset roleDescription
adminAdminFull administration of Superset
any otherGammaDefault role for all other users

Grafana​

RoleDescription
grafanaServerAdminFull server administration, including plugin installation
grafanaAdminOrganization administrator
grafanaEditorCan create and edit dashboards
grafanaViewerRead-only access to dashboards

Node-RED​

RoleDescription
noderedAdminFull access to create and edit flows
noderedViewerRead-only access