Commit Graph
6 Commits
Author SHA1 Message Date
Alex McGrath 5a452f16f1 use editor instead of admin in tctl usage example (#13557) 2022-06-22 10:58:35 +00:00
Zac Bergquist c9c35a1791 Update descriptions in our --help messages (#11267) 2022-03-21 15:28:16 +00:00
Zac Bergquist 85541510fe Support traits for Windows Logins (#8585)
- Add --windows-logins flag to tctl users add command
- Support {{internal.windows_logins}} and external traits from IDP

This allows one to define a role allowing desktop access without
hard coding all allowed/denied Windows logins.

Updates #7761
Fixes #8578
2021-10-13 08:39:31 -07:00
Sasha Klizhentas 013f9680c9 OSS RBAC
Implements RFD #7

https://github.com/gravitational/teleport/blob/master/rfd/0007-rbac-oss.md

OSS users can use roles. Some FedRamp related role options
are limited to enterprise.

All users are migrated to a new role "ossuser".

This role is a limited access role downgrading all users
from OSS role "admin".

All trusted clusters are mapped to "ossuser" as well.

Github connector maps teams to generated roles.

For transition period, format `tctl users add alice` works
alongside with `tctl users add alice --roles=admin`, but prints
a warning.
2021-02-17 17:04:03 -08:00
Ev Kontsevoy 432cb34c91 Migrated 'users' and 'nodes' CLI commands to the new model 2017-07-25 22:13:02 -07:00
Sasha Klizhentas 202c3fc0b9 move code around 2017-02-15 18:29:17 -08:00