Edit an existing role binding in the policy for an object to modify permissions for a member or group.

Prerequisites

Log in to the Tanzu Mission Control console, and then go to the Access page for the type of object for which you want to edit a role binding, as described in View Your Access Policies.

Make sure you have the appropriate permissions.

  • To edit the access policy for an object, you must be associated with the .admin role for that object.

Procedure

  1. Navigate to the object whose access policy you want to edit, as described in View Your Access Policies.
  2. In the organizational view, select the object.
  3. Click the arrow next to the object name under Direct Access Policies.
  4. Click Edit for the role binding you want to modify.
  5. To remove an identity from the binding, click the delete (x) icon of the identity.
  6. To bind additional identities to the existing role, select the identity type, enter the name of the identity, and then click Add.
  7. When you are finished making changes, click Save.

Results

When you click Save, the new role binding is applied to the access policy and is displayed on the appropriate Access page.