Managing Cribl.Cloud
From the Organization > Members tab, an Organization’s owner can invite new users to join the Organization, assign access permissions to new and existing members, remove pending invites, and remove existing members.
Inviting Members
Click Invite Member to open the modal shown below. Enter the Email address of the new user you want to invite, assign them appropriate permission on your Organization (explained just below), and then click Invite to send the invitation.
Responding to Invites
At the address you entered, the new member receives an email with an Accept Invitation link to either sign into their existing Cribl.Cloud account, or else sign up to create an account and its credentials.
After signing in, they’ll have access to your Organization and Cribl instance at the permission level you’ve specified.
Organization Member Permissions
Newly configured Members start out with the permissions they were granted when they were invited at the Organization level, as well as the No Access permission on each product. An Organization’s Owner can assign the User, Admin, and Owner permissions at the Organization level. Assigning the User permission requires an Enterprise license. You assign permissions per individual user when you invite them to your Organization, or after they join it. Cribl.Cloud does not currently support globally predefining or assigning group permissions, as with on-prem deployments.
| Permission | User | Admin | Owner |
|---|---|---|---|
| Log into the system | ✓ | ✓ | ✓ |
| Update own member profile | ✓ | ✓ | ✓ |
| View Stream Worker groups you have access to | ✓ | ✓ | ✓ |
Read Only Access to all Products | ✓ | ✓ | |
Admin Access to all Products | ✓ | ||
| View and execute Leader commits | ✓ | ||
| View and modify Global Settings | ✓ | ||
| Manage ACLs (Access Control lists) | ✓ | ✓ | |
| View and update SSO settings | ✓ | ✓ | |
| View Data Sources and Trust Policies | ✓ | ✓ | |
| Manage API Credentials | ✓ | ✓ | |
| View and manage Cribl Suite Global Settings | ✓ | ✓ | |
| View and manage (provision, update, and delete) Stream Worker Groups | ✓ | ✓ | |
| View and execute Leader commits | ✓ | ✓ | |
| View the Organization’s Billing dashboards | ✓ | ✓ | |
| View Organization Details | ✓ | ✓ | |
| Update Organization Details | ✓ | ||
| Delete an Organization | ✓ | ||
| View Organization members | ✓ | ✓ | |
| Manage (invite, update, delete) Organization members | ✓ |
Each user can have Owner permissions for multiple organizations, and each organization can have multiple users as Owners. However, each user – as defined by their email address – can register only one active Organization, and only if they are not already the Owner of a different Organization.
Cribl.Cloud has retired the access-management model of Local Users and Roles/Policies that Cribl applications used prior to v.4.2. Create and configure only Members on Cribl applications – references elsewhere in Cribl docs to Local Users do not apply to Cribl.Cloud.
Search Member Permissions
You can assign the following Permissions at the Search product level.
| Permission | User | Editor | Admin |
|---|---|---|---|
| Search data and view results shared with the user | ✓ | ✓ | ✓ |
| Create, configure, view, and modify datasets | ✓ | ✓ | |
| Create, configure, view, and modify dataset providers | ✓ | ✓ | |
| Unhide dataset provider credentials | ✓ | ||
| Create, configure, view, and modify dashboard | ✓ | ✓ | |
| Create, configure, view, and modify settings like datatypes | ✓ | ✓ | |
| Invite other users (Members) to the workspace | ✓ | ✓ | |
| Manage other Members | ✓ | ||
| Promote Members to Admins | ✓ | ||
| Configure read-only datasets and dashboards | ✓ | ||
| Access billing information own queries | ✓ | ||
| See search history | Only own searches | Only own searches | ✓ |
| Search Query Language | |||
export operator | ✓ | ✓ | |
send operator | Only default URL | ✓ | ✓ |
.cancel command | Only own searches | Only own searches | ✓ |
.show queries command | Only own searches | Only own searches | ✓ |
$vt_datasets virtual table | ✓ | ||
$vt_dataset_providers virtual table | ✓ | ||
$vt_jobs virtual table | Only own searches | Only own searches | ✓ |
$vt_object_list virtual table | ✓ | ||
$vt_object_list_summary virtual table | ✓ | ||
$vt_results virtual table | Only own searches | Only own searches | ✓ |
set statements | Only own searches | Only own searches | ✓ |
.clear options command | Only own options | Only own options | ✓ |
Managing Invites
While an invite is pending, the Organization > Members tab offers you these options to deal with commonly encountered issues:
Reinvite: If your invited member didn’t receive your invitation email, you can click this button to resend it.
Copy Link: If emails aren’t getting through at all, click this button to copy and share a URL that will take the invitee directly to the signup page. This target page encapsulates the same identity, Organization, and Permissions you specified in the original email invite.
Remove: This is for scenarios where you need to revoke a pending invite. (You sent someone a duplicate invite, your invitee is spending too much time in space to be a productive collaborator, etc.) After clicking this button, you’ll see a confirmation dialog.
After seven days, if an invite has been neither accepted nor revoked, it expires. In this case, it is removed from the Members tab.
Managing Members
Once a user has accepted an invite, the Organization > Members tab offers you these options to modify their membership in your Organization:
Edit: Change this member’s Permissions. (The Edit option is displayed only if you have an Enterprise plan.)
Remove: Remove this member from your Organization. After clicking this button, you’ll see a confirmation dialog. (Proceeding will not affect this user’s access to any other Cribl.Cloud Organizations they might own or be members of.)