You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/admin/admin-ui-setup/admin-ui-users.md
+20-45Lines changed: 20 additions & 45 deletions
Original file line number
Diff line number
Diff line change
@@ -2,10 +2,10 @@
2
2
3
3
## Introduction
4
4
5
-
The Run:aiUser Interface allows the creation of Run:ai Users. Run:aiUsers can receive varying levels of access to the Administration UI and submit Jobs on the Cluster.
5
+
The Run:aiUI allows the creation of Run:ai Users. Users are assigned levels of access to all aspects of the UI including submitting jobs on the cluster.
6
6
7
7
!!! Tip
8
-
It is possible to connect the Run:aiuser interface to the organization's directory and use single sign-on. This allows you to set Run:ai roles for users and groups from the organizational directory. For further information see [single sign-on configuration](../runai-setup/authentication/sso.md).
8
+
It is possible to connect the Run:aiUI to the organization's directory and use single sign-on (SSO). This allows you to set Run:ai roles for users and groups from the organizational directory. For further information see [single sign-on configuration](../runai-setup/authentication/sso.md).
9
9
10
10
## Working with Users
11
11
@@ -14,54 +14,29 @@ You can create users, as well as update and delete users.
14
14
### Create a User
15
15
16
16
!!! Note
17
-
To be able to review, add, update and delete users, you must have an *Administrator* access. If you do not have such access, please contact an Administrator.
17
+
To be able to review, add, update and delete users, you must have *System Administrator* access. To upgrade your access, contact a system administrator.
18
18
19
-
:octicons-versions-24: Department Admin is available in version 2.10 and later.
19
+
To create a new user:
20
20
21
-
1. Login to the Users area of the Run:ai User interface at `company-name.run.ai`.
22
-
2. Select the `Users` tab for local users, or the `SSO Users` tab for SSO users.
23
-
3. On the top right, select "NEW USER".
24
-
4. Enter the user's email.
25
-
5. Select Roles. More than one role can be selected. Available roles are:
26
-
***Administrator**—Can manage Users and install Clusters.
27
-
***Editor**—Can manage Projects and Departments.
28
-
***Viewer**—View-only access to the Run:ai User Interface.
29
-
***Researcher**—Can submit ML workloads. Setting a user as a *Researcher* also requires [assigning the user to projects](../project-setup/#create-a-new-project.md).
30
-
***Research Manager**—Can act as *Researcher* in all projects, including new ones to be created in the future.
31
-
***ML Engineer**—Can view and manage deployments and cluster resources. Available only when [Inference module is installed](../workloads/inference-overview.md).
32
-
***Department Administrator**—Can manage Departments, descendent Projects and Workloads.
21
+
1. Login to the Run:ai UI at `company-name.run.ai`.
22
+
2. Press the  icon, then select *Users*.
23
+
3. Press *New user* and enter the user's email address, then press *Create*.
24
+
4. Review the new user information and note the temporary password that has been assigned. To send the user an introductory email, select the checkbox.
25
+
5. Press *Done* when complete.
33
26
34
-
For more information, [Roles and permissions](#roles-and-permissions).
27
+
## Assigning access rules to users
35
28
36
-
6. (Optional) Select Cluster(s). This determines what Clusters are accessible to this User.
37
-
7. Press "Save".
29
+
Once you have created the users you can assign them *Access rules*. This provides the needed authorization to access system assets and resources.
38
30
39
-
You will get the new user credentials and have the option to send the credentials by email.
31
+
To add an *Access rule*to a user:
40
32
41
-
### Roles and permissions
42
-
43
-
Roles provide a way to group permissions and assign them to either users or user groups. The role identifies the collection of permissions that administrators assign to users or user groups. Permissions define the actions that users can perform on the managed entities. The following table shows the default roles and permissions.
33
+
1. Select the user, then press *Access rules*, then press *+Access rule*.
34
+
2. Select a *Role* from the dropdown.
35
+
3. Press  then select a scope for the user. You can select multiple scopes.
36
+
4. After selecting all the required scopes, press *Save rule*.
37
+
5. To add another rule, use the *+Access rule*.
38
+
6. Press *Done* when all the rules are configured.
Roles provide a way for administrators to group and identify collections of permissions that administrators assign to [subjects](../runai-setup/access-control/rbac.md#subjects). Permissions define the actions that can be performed on managed entities. The [Roles](../runai-setup/access-control/rbac.md#roles) table shows the default roles and permissions that come with the syste. See [Role based access control](../runai-setup/access-control/rbac.md) for more information.
Copy file name to clipboardExpand all lines: docs/admin/admin-ui-setup/department-setup.md
+26-9Lines changed: 26 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -56,30 +56,47 @@ To add a new department:
56
56
57
57
1. In the **Departments** grid, press **New Department**.
58
58
2. Enter a name.
59
-
3. In *Quota management* configure the number GPUs, CPUs, and CPU memory.
60
-
4. In *Access control* select a user or application to be department administrator. If there are no users assigned the role of department administrator, see [Assigning Department Administrator role](#assigning-department-administrator-role).
59
+
3. In *Quota management* configure the number GPUs, CPUs, and CPU memory, then press *Save*.
60
+
61
+
<!-- 4. In *Access control* select a user or application to be department administrator. If there are no users assigned the role of department administrator, see [Assigning Department Administrator role](#assigning-department-administrator-role). -->
61
62
62
63
### Assigning Department Administrator role
63
64
65
+
There are two ways to add *Department Administrator* roles to a department.
66
+
67
+
The first is through the *Users* UI, and the second is through the *Access rules* that you can assign to a department.
68
+
69
+
#### Users UI
70
+
64
71
You can create a new user with the *Department Administrator* role, or add the role to existing users.
65
72
To create a new user with this role, see [Create a user](admin-ui-users.md#create-a-user).
66
73
To add this role to an existing user:
67
74
68
-
1. Go to `Settings | Users`.
69
-
2. Select a user from the list and then press `Edit User`.
70
-
3. Select the `Department Admin` role from the list. (Deselect to remove the role from the user).
71
-
4. Press save when complete.
75
+
1. Press the  icon, then select *Users*..
76
+
2. Select a user, then press *Access rules*, then press *+Access rule*.
77
+
3. Select the `Department Administrator` role from the list.
78
+
4. Press on the  and select one or more departments.
79
+
5. Press *Save rule* and then *Close*.
72
80
73
-
After you have created the user with the Department Administrator role, you will need to assign the user to the correct department.
81
+
#### Assigning the access rule to the department
82
+
83
+
To assign the *Access rule* to the department:
84
+
85
+
1. Select a department from the list, then press *Access rules*, then press then press *+Access rule*.
86
+
2. From the *Subject type* dropdown choose *User* or *Application*, then enter the user name or the application name.
87
+
3. From the *Role* dropdown, select *Department administrator*, then press *Save rule*.
88
+
4. If you want to add another rule, use the *+Access rule*.
89
+
5. When all the rules are configured, press *Close*.
90
+
91
+
<!-- After you have created the user with the Department Administrator role, you will need to assign the user to the correct department.
74
92
75
93
To assign the Department Administrator user to the correct department:
76
94
77
95
1. Go to `Settings | Departments`.
78
96
2. Select a department from the list, then press `Edit`. If you do not have a department, you will need to create one. See [Adding a new department](#adding-departments).
79
97
3. Select `Department Administrator`, then select `Users` or `Applications`.
80
98
4. If you selected `Users`, select one or more users from the drop down menu.
Copy file name to clipboardExpand all lines: docs/admin/admin-ui-setup/project-setup.md
+20-11Lines changed: 20 additions & 11 deletions
Original file line number
Diff line number
Diff line change
@@ -46,29 +46,38 @@ As an administrator, you may want to disconnect the two parameters. So, for exam
46
46
!!! Note
47
47
To be able to create or edit Projects, you must have *Editor* access. See the [Users](admin-ui-users.md) documentation.
48
48
49
-
1. In the left-menu, press **Projects**.
50
-
1.5 On the top right, select "Add New Project"
49
+
1. In the left-menu, press **Projects**, then press *+Add New Project*.
51
50
2. Choose a *Department* from the drop-down. The default is `default`.
52
51
3. Enter a *Project name*. Press *Namespace* to set the namespace associated with the project. You can either create the namespace from the project name (default) or enter an existing namespace.
53
-
4. In *Access control*, add one or more applications or users. If your user or application isn't in the list, see [Roles and permissions](admin-ui-users.md#roles-and-permissions), and verify that the users have the correct permissions. To change user permissions, see [Working with users](admin-ui-users.md#working-with-users).
54
-
5. In *Quota management*, configure the node pool priority (if editable), the GPUs, CPUs, CPU memory, and Over-quota priority settings. Configure the following:
52
+
4. In *Quota management*, configure the node pool priority (if editable), the GPUs, CPUs, CPU memory, and Over-quota priority settings. Configure the following:
55
53
56
54
* *Order of priority*—the priority the node pool will receive when trying to schedule workloads. For more information, see [Node pool priority](../../Researcher/scheduling/using-node-pools.md#multiple-node-pools-selection).
57
55
* *GPUs*—the number of GPUs in the node pool. Press *GPUs* and enter the number of GPUs, then press *Apply* to save.
58
56
* *CPUs(Cores)*—the number of CPU cores in the node pool. Press *CPUs* and enter the number of GPUs, then press *Apply* to save.
59
57
* *CPU Memory*—the amount of memory the CPUs will be allocated. Press *CPU Memory*, enter an amount of memory, then press *Apply* to save.
60
58
* Over-quota priority—the priority for the specific node pool to receive over-quota allocations.
61
59
62
-
6. (Optional) In the *Scheduling rules* pane, use the dropdown arrow to open the pane. Press on the *+ Rule* button to add a new rule to the project. Add one (or more) of the following rule types:
60
+
5. (Optional) In the *Scheduling rules* pane, use the dropdown arrow to open the pane. Press on the *+ Rule* button to add a new rule to the project. Add one (or more) of the following rule types:
63
61
64
62
**Idle GPU timeout*—controls the amount of time that specific workload GPUs which are idle will be remain assigned to the project before getting reassigned.
65
63
**Workspace duration*—limit the length of time a workspace will before being terminated.
66
64
**Training duration*—limit the length of time training workloads will run.
67
65
**Node type (Affinity)*—limits specific workloads to run on specific node types.
66
+
67
+
<!-- 4. In *Access control*, add one or more applications or users. If your user or application isn't in the list, see [Roles and permissions](admin-ui-users.md#roles-and-permissions), and verify that the users have the correct permissions. To change user permissions, see [Working with users](admin-ui-users.md#working-with-users). -->
68
+
69
+
## Assign users to a Project
70
+
71
+
<!-- This is no longer available even when it is set to enabled!!
72
+
When [Researcher Authentication](../runai-setup/authentication/researcher-authentication.md) is enabled, the Project form will contain an additional *Access Control* tab. The tab will allow you to assign Researchers to their Projects. -->
68
73
69
-
## Assign Users to Project
74
+
To assign *Access rules*to the project:
70
75
71
-
When [Researcher Authentication](../runai-setup/authentication/researcher-authentication.md) is enabled, the Project form will contain an additional *Access Control* tab. The tab will allow you to assign Researchers to their Projects.
76
+
1. Select a project from the list, then press *Access rules*, then press then press *+Access rule*.
77
+
2. From the *Subject type* dropdown choose *User* or *Application*, then enter the user name or the application name.
78
+
3. From the *Role* dropdown, select the desired role, then press *Save rule*.
79
+
4. If you want to add another rule, use the *+Access rule*.
80
+
5. When all the rules are configured, press *Close*.
72
81
73
82
If you are using Single-sign-on, you can also assign Groups
74
83
@@ -175,9 +184,9 @@ To set a duration limit for interactive Jobs:
175
184
* Create a Project or edit an existing Project.
176
185
* Go to the *Time Limit* tab
177
186
* You can limit interactive Jobs using two criteria:
178
-
* Set a hard time limit (day, hour, minute) to an Interactive Job, regardless of the activity of this Job, e.g. stop the Job after 1 day of work.
179
-
* Set a time limit for Idle Interactive Jobs, i.e. an Interactive Job idle for X time is stopped. Idle means no GPU activity.
180
-
* You can set if this idle time limit is effective for Interactive Jobs that are Preemptible, non-Preemptible, or both.
187
+
* Set a hard time limit (day, hour, minute) to an Interactive Job, regardless of the activity of this Job, e.g. stop the Job after 1 day of work.
188
+
* Set a time limit for Idle Interactive Jobs, i.e. an Interactive Job idle for X time is stopped. Idle means no GPU activity.
189
+
* You can set if this idle time limit is effective for Interactive Jobs that are Preemptible, non-Preemptible, or both.
181
190
182
191
The setting only takes effect for Jobs that have started after the duration has been changed.
183
192
@@ -187,7 +196,7 @@ To set a duration limit for Training Jobs:
187
196
188
197
* Create a Project or edit an existing Project.
189
198
* Go to the *Time Limit* tab:
190
-
* Set a time limit for Idle Training Jobs, i.e. a Training Job idle for X time is stopped. Idle means no GPU activity.
199
+
* Set a time limit for Idle Training Jobs, i.e. a Training Job idle for X time is stopped. Idle means no GPU activity.
191
200
192
201
The setting only takes effect for Jobs that have started after the duration has been changed.
0 commit comments