Control server access

You can efficiently manage server access by assigning user groups to servers. All server-related access including terminal connections, audit log viewing, and monitoring is only allowed for assigned groups.

Assign groups to servers

During registration

  1. Select Authorized groups when registering server
  2. Multiple groups can be selected
  3. Users in selected groups can access the server

For existing servers

  1. Select server from server list
  2. Click Update
  3. Modify Authorized groups
  4. Click Save

Filter by groups

Filter servers by group in the server list.

Using filters:

  1. Click Group filter dropdown at top of server list
  2. Select desired group
  3. Only servers assigned to that group are displayed

Group-based access control

Control user access to servers through groups.

How it works:

  1. Add users to a group
  2. Assign that group to servers
  3. All group users can access those servers

Example:

Group: developers
Members: user1, user2, user3

Servers: web-server-01, web-server-02
Assigned groups: developers

→ user1, user2, user3 can all access both servers

Group management

Create groups

See Create groups for group creation and management.

Assign users to groups

See Assign users to groups for user assignment.

Best practices

Environment-based separation

Group structure:
- production-servers
- staging-servers
- development-servers

Access permissions:
- production-servers: Senior engineers only
- staging-servers: All engineers
- development-servers: All developers

Project-based separation

Group structure:
- project-alpha
- project-beta
- project-gamma

Each project team accesses only their servers

Role-based separation

Group structure:
- frontend-team
- backend-team
- devops-team

Teams access only relevant servers

Multiple group assignment

A single server can be assigned to multiple groups.

Example:

Server: shared-database-server
Assigned groups:
- backend-team
- devops-team

→ All members of both groups can access

Servers without groups

Servers with no assigned groups:

  • Accessible only by Superusers
  • Regular users cannot access
  • Useful for isolated management servers