⇠ Back to the blog
Cover for Control SSH access at any level with groups and permissions

Control SSH access at any level with groups and permissions

Christian Nguyen avatarWritten by Christian Nguyen

Overview

Setting up identity and access management is something that is usually dreaded by all organizations. While its necessary for every company to have, it's always a long and tedious process to setup. However, with Cased's groups and permissions - all organizations need to do is write simple JSON policies that only take minutes to give the right people the right SSH access to prompts. We make it easy for you to administer access - we autosave your work after every few characters typed, and we validate your JSON. These policies are also very customizable, and can be written at either the user or group level.

User level

{
  "user@cased.com":{
    "email": "user@cased.com",
    "labels": {
      "environment": "development"
    }
  }
}

To give access at the user level, there are only three things you must have in your policy. The key value, for best practice will be named the same as the email, the user's email, and the labels that they are given access to.

Group level

{
  "devops":{
    "name": "devops",
    "labels": {
      "app": "*",
      "environment": ["production","development"]
    }
  }
}

To give access at the group level, you also only need three things. The key value, for best practice will be named the same as the group, the group, and the labels that they are given access to.

And that's all there is to it. Administering SSH access doesn't have to be difficult. It only takes minutes to give the right people the right access to prompts. Increase your engineering velocity while staying secure and compliant with Cased.

If you're interested and want to learn more schedule a demo or visit our documentation.