mirror of
https://github.com/fosrl/docs-v2.git
synced 2026-10-21 20:19:11 +02:00
14 lines
1.4 KiB
Plaintext
14 lines
1.4 KiB
Plaintext
---
|
|
title: "Authentication"
|
|
description: "Only allow access to resources to specific users, roles, and machines"
|
|
---
|
|
When a client connects into an organization they will NOT have access to any resources by default. Access must be explicitly granted to users, roles, or machines for a tunnel to be established to the site(s) hosting the resource. The client will show no sites or resources unless access is granted.
|
|
|
|
Access can be granted in several ways:
|
|
|
|
* **Roles:** Assign access to resources to specific roles. Any user with that role, and any [machine client](/manage/clients/machine-clients) assigned that role, gains access to the resource when they connect.
|
|
* **Users:** Assign access to resources to specific users. Only those users will gain access to the resource when they connect.
|
|
* **Machines:** Assign access to resources to specific machine clients. Only those machine clients will gain access to the resource when they connect. You can also put machine clients into roles so they inherit the same private-resource access as that role; see [Machine Clients](/manage/clients/machine-clients#grant-access-to-private-resources) and [Users and Roles](/manage/access-control/create-user#machine-clients-and-roles).
|
|
|
|
When removing access to a resource, the client will automatically tear down the tunnel to that resource if there are no other resources accessible on that site.
|