Access Control

This section provides instructions for managing user access in Develocity using Role-Based Access Control (RBAC).

Develocity supports both locally managed user accounts and permissions and external management via an LDAP service or a SAML 2.0 identity provider. CI workloads can authenticate with short-lived OIDC tokens through workload identity federation, instead of long-lived access keys.

Initial setup can be performed by the system user. Subsequently, any user with the Configure access control permission can configure access control.

Manage the built-in administrative account used for initial setup and recovery.

Identity Provider

Configure an external identity provider.

Workload Identity

Authenticate CI workloads with short-lived OIDC tokens instead of access keys.

User Provisioning

Govern the automated lifecycle of user accounts via your identity provider.

Permissions and Roles

Define roles and permissions to keep the system secure.

Project-Level Access Control

Apply security constraints to individual projects.

Anonymous Access

Configure permissions for unauthenticated users.