Webiny Enterprise license is required to use this feature.
This feature is available since Webiny v5.37.0.
- what are the three tiers of Webiny’s security layer
- an overview of the features the Teams feature provides and how to use it
- how the enable Teams
Webiny’s security layer divided into three tiers. The higher the tier, the more features are available.
All Webiny project start with the Open Source tier. The tier is free to use, but is limited when it comes to defining fine-grained permissions, allowing only the No Access and Full Access to be selected when defining permissions for individual Webiny apps.
Trying to select Custom Access will result in an alert message being shown, informing the user that the feature is only available with the Advanced Access Control Layer (AACL), which is available on the Business and Enterprise tiers.
To upgrade to Business tier, users link their project with Webiny Control Panel (WCP), from where they can activate the Advanced Access Control Layer (AACL) for their project. By doing this, users will be able to define fine-grained permissions for individual Webiny apps.
Finally, for the most advanced use cases, users can upgrade to the Enterprise tier. On top of the features available with the first two tiers, the Enterprise tier introduces Teams, which essentially enables users to assign users into teams and easily have them linked with one or more roles.
More on this in the following section.
With the Open Source and Business tiers, admin users can only be linked with a single security role.
This means that if you want to have a user with multiple roles, you need to manually create a new role that combines the permissions of the two roles you want to combine.
And although this approach might work for some users, it can quickly become cumbersome to manage. This is where Teams comes in. With it, users can be assigned into a team, where each team can be linked with one or more roles.
This feature is especially useful for larger organizations, where it’s common to have multiple teams working on different projects. Also, it’s a great way to simplify the process of managing permissions for multiple users, as you can simply assign a role to a team, instead of assigning it to each individual user.
For Webiny Enterprise users, apart from linking their Webiny project with Webiny Control Panel (WCP), there are no additional steps required to enable Teams.
Once linked, Teams will be automatically enabled and the module can be accessed from the main menu:
Via the Teams module, users can create new teams that consist of one or more security roles.
Once a team is created, users can assign it to one or more users. This can be done by editing the user and selecting the team via the Team field.
No, you can’t assign multiple security roles to a user without the Teams enabled.
Yes, you can assign multiple roles to a team.
No, users can only be assigned to a single team.
No. Teams are only available with the Enterprise tier.