Skip to main content

​
What It Is

Access Control & Security covers how organizations manage permissions and track activity. This includes role-based access control (RBAC) with custom roles and fine-grained permissions, audit logging, and team-wide security policies.

​
RBAC

RBAC lets admins create custom roles with explicit permissions over resources. Permissions are expressed as actions over resource patterns, with enforcement server-side so access is consistent across the extension and backend. Resource types:
  • Templates, Secrets, Images (environment-scoped)
  • Builds, Clusters, Workspaces
  • Org members, Org roles, Org settings
  • Audit (team or self scope)
Actions:
  • read, write, admin, *
  • deploy (templates), use (secrets)
Permission patterns: Permissions use glob patterns for flexible matching:
  • /templates/** - all templates
  • /environments/staging/secrets/** - secrets in staging only
  • /clusters/** - all clusters
  • /audit/team/** - team-wide audit events

​
Managing RBAC in the UI

Open the Organization panel and click Manage Roles to access the roles view. Creating roles:
  1. Click Create new
  2. Enter role name and description
  3. Add permissions by selecting resource type, action, and optional environment
  4. Click Create Role
Assigning roles: In the Organization panel overview, use the Assign Role card to select a member and role, then click Assign. Viewing member roles: The Members table shows assigned RBAC roles for each member in the organization.

​
Managing RBAC via Chat

Admins can manage RBAC through chat: 
list roles for my organization

create a role called deployer with deploy access to /templates/**

give Alice the deployer role

does Bob have access to /secrets/**?

show my current permissions

​
Audit Logging

Audit events are recorded when you work in an organization context. The log captures actions like builds, deployments, cluster operations, and secret changes, including actor, status, and trace information. How to view:
  • Welcome screen: Recent events appear in the Team Events card.
  • Activity panel: Open from the Monk Dashboard for a full timeline.
Owners and admins can view team-wide activity. All members can view their own activity.

​
Not Available Yet

Single sign-on, domain enforcement, and org-wide 2FA are not available yet.