Teams

The Three Tiers of Webiny's Security Layer

Webiny’s security layer divided into three tiers. The higher the tier, the more features are available.

All Webiny project start with the Open Source tier. The tier is free to use, but is limited when it comes to defining fine-grained permissions, allowing only the No Access and Full Access to be selected when defining permissions for individual Webiny apps.

Trying to select Custom Access will result in an alert message being shown, informing the user that the feature is only available with the Advanced Access Control Layer (AACL), which is available on the Business and Enterprise tiers.

Selecting Custom Access Level on Open Source Tier

(click to enlarge)

To upgrade to Business tier, users link their project with Webiny Control Panel (WCP), from where they can activate the Advanced Access Control Layer (AACL) for their project. By doing this, users will be able to define fine-grained permissions for individual Webiny apps.

Selecting Custom Access with Advanced Access Control Layer (AACL) Enabled

(click to enlarge)

Finally, for the most advanced use cases, users can upgrade to the Enterprise tier. On top of the features available with the first two tiers, the Enterprise tier introduces Teams, which essentially enables users to assign users into teams and easily have them linked with one or more roles.

More on this in the following section.

Overview

With the Open Source and Business tiers, admin users can only be linked with a single security role.

Roles Assigned To Users

(click to enlarge)

This means that if you want to have a user with multiple roles, you need to manually create a new role that combines the permissions of the two roles you want to combine.

And although this approach might work for some users, it can quickly become cumbersome to manage. This is where Teams comes in. With it, users can be assigned into a team, where each team can be linked with one or more roles.

Users Assigned to Teams

(click to enlarge)

This feature is especially useful for larger organizations, where it’s common to have multiple teams working on different projects. Also, it’s a great way to simplify the process of managing permissions for multiple users, as you can simply assign a role to a team, instead of assigning it to each individual user.

Enabling Teams and Feature Overview

For Webiny Enterprise users, apart from linking their Webiny project with Webiny Control Panel (WCP), there are no additional steps required to enable Teams.

Once linked, Teams will be automatically enabled and the module can be accessed from the main menu:

Teams Available From the Main Menu

(click to enlarge)

Via the Teams module, users can create new teams that consist of one or more security roles.

Creating a New Team

(click to enlarge)

Once a team is created, users can assign it to one or more users. This can be done by editing the user and selecting the team via the Team field.

Assigning Admin Users To Teams

(click to enlarge)

FAQ

Can I Assign Multiple Security Roles to a User Without the Teams Enabled ?

No, you can’t assign multiple security roles to a user without the Teams enabled.

Can I Assign Multiple Roles to a Team?

Yes, you can assign multiple roles to a team.

Can I Assign Users to Multiple Teams?

No, users can only be assigned to a single team.

Can I Use Teams With the Open Source or Business Tier?

No. Teams are only available with the Enterprise tier.