Authorization

Overview

Kloudfuse authorization is built on two layers working together to define access.

  • RBAC — A User is assigned a Role, a system-wide permission that determines what actions they can take (view, edit, admin).

  • Teams — Users can be assigned to one or more Teams. Teams are then used to control:

    • Stream Access — Which data streams the team can query.

    • Label Filters — What label filters are automatically applied to every data query.

    • Folder Access — Which dashboards, alerts, and other objects within Kloudfuse the team can view and manage.