Manage access control for connectors

Learn how to manage access control for connectors by type, name, or tags.

This feature is in Beta and requires enablement. View all early access features.

Role-based access control (RBAC) in Harness helps you manage access to connectors by defining who can access them, what actions they can perform, and where those actions are allowed. Access is controlled through roles assigned to users, user groups, and service accounts.

---

What you will learn from this topic

• How to configure a role with connector permissions.

• How to configure a resource group scoped to connectors by type, tag, or specific connector.

• How to assign the role and resource group to a user, user group, or service account.

---

Before you begin

Before you manage access control for connectors, ensure you have the following:

• Account Admin permissions: Permissions to modify access control settings at the Account level. Go to Role-based access control (RBAC) in Harness for more information on role requirements.

• Understanding of resource groups: Knowledge of how resource groups work in Harness. Go to Manage resource groups for more information.

• Connectors overview: Understanding of what connectors are and how they work in Harness before you configure access control. Go to Connectors for an overview of connector types.

---

Configure roles

Perform the following steps to configure a role with connector permissions:

1. Navigate to Account Settings -> Access Control -> Roles.

2. Add or edit a role.

3. In the role, check the Shared Resources -> Connectors section to ensure the appropriate permissions are granted, as shown in the following image.

Connector permissions in a role

---

Configure resource groups

Perform the following steps to configure a resource group scoped to connectors:

1. Go to Account Settings -> Access Control -> Resource Groups.

2. Create or edit a resource group.

3. Select the appropriate Resource Scope based on your requirements.

4. Set Resource to All to provide access to all resources, or select Specified to scope access to specific resources, as shown in the following image.

resource-group-and-resource

1. After you specify the resources, search for Shared Resources and select Connectors. You can add connectors to a resource group in one of the following four ways:

   • All: Provides access to all connectors at a particular resource scope.

     

     All connectors resource type
   • By Type: Grants access to one or more specific connector types, such as artifact repositories, cloud providers, and secret managers, based on your selection.

     

     Connectors by type
   • By Tag: Grants access to connectors based on matching tags. If a connector has a tag included in the resource group's tag list, users with the corresponding role assignments automatically gain access. If the tag is removed from the connector, access is automatically revoked.

     

     Connectors by tag
   • Specified: Grants access to one or more specific connectors that already exist. This option is available only at the Account-only, Organization-only, or Project-only scopes.

     

     Specified connectors

By configuring resource groups this way, you can manage connector access in four different ways, providing granular access control.

---

Assign access control for connectors

After you configure the resource group for connectors, assign the role binding to a principal.

For example, to assign access to a user, navigate to Account Settings -> Access Control -> Users. For the relevant user, select Manage Role Bindings, and then select the role and resource group you created.

Assign a role binding to a user

---

Next steps

• Add and manage roles: Create custom roles or edit built-in roles.

• Manage resource groups: Scope resource groups to specific resources.

• Role-based access control (RBAC) in Harness: Understand roles, resource groups, and principals.