Role-Based Access Control (RBAC) is available in VantageCloud Lake through your corporate IDP groups. You can control user membership with IDP groups and map those groups directly to VantageCloud Lake roles by navigating to Add Realm > Advanced Options > Roles Mapping.
With the RBAC implementation, previous database role assignments are overridden. You need to make sure that users are members of the appropriate IdP groups to receive the correct roles. Properly managing group membership is essential for maintaining access and functionality.
TD_ENVIRONMENT_ADMIN role enables users to perform self-service backup and restore operations. As an organization admin, you can delegate backup and restore operations to other members of your organization, ensuring least privilege access and effective separation of duties.
- When performing restore operations, you must enter your credentials and have explicit restore permissions for each database you intend to restore. Assigning the new Environment Admin role alone is not sufficient for restore operations.
- You cannot run two backup jobs at the same time. Finish or cancel the current job before starting a new one.
- You need to map all VantageCloud Lake roles to either database users or IdP groups. Mapping a subset of roles to both is not supported.
- TD_CC_MEMBER_[compute group name]
- TD_CC_ADMIN_[compute group name]
Dynamic roles cannot be assigned through Roles mapping. You need to assign these roles manually to database users through SQL scripts or through user management interface. You cannot map these roles to your IDP groups using the standard interface, and they may not appear during realm-role mappings if compute groups are created after the initial setup.