Role Mapping¶

Based on the added SSO configuration, after enabling role mapping, employees can be dynamically assigned access permissions. Employees can access Guance based on the assigned role permissions.

Add Mapping¶

1. Go to Manage > Member Management > SSO Management > Role Mapping.
2. Click Add Mapping to start creating a new mapping relationship.
3. Identity Provider: You can select all identity providers within the current workspace.
4. Define Attribute Field and Attribute Value: The configured attribute field and attribute value must match the configuration in the Identity Provider (IdP) account to successfully verify and grant the corresponding role permissions.
5. Select a role for authorization.

Manage Mapping¶

You can manage mapping rules through the following operations:

• Search and Filter: Support searching mapping relationships by role, attribute field, and attribute value, and filter by identity provider.
• Edit: Modify the configured mapping relationship. If an SSO login user does not match any role, they will be deprived of all roles and unable to log in to the Guance console.
• Delete: Directly or batch delete mapping relationships. After deletion, users who do not match any role will be deprived of all roles and unable to log in to the Guance console.