Dynamic RBAC Assignments

We will guide you through the process of setting up dynamic group-to-role mappings for automatic Role-Based access control (RBAC) provisioning.

Prerequisites

Before proceeding, ensure you have completed the initial setup for SSO and SCIM provisioning as outlined in our Okta SSO & SCIM Provisioning.

Configuring Okta Groups for Better Stack Roles

Create Okta groups that match the Better Stack roles. Users in these Okta groups will automatically receive corresponding roles in Better Stack when provisioned via SCIM.

Supported Roles in Better Stack:

• Admin
• Billing Admin
• Team Lead
• Responder
• Member

You can find a full overview of the permissions per role in the Roles & Permission settings.

Steps in Okta Administration:

1. For each role in Better Stack, ensure there is a corresponding group in Okta with the exact same name. For example, if you'd like to create users with Admin access rights, your group should be named Admin.

2. Place users into the appropriate Okta groups based on their intended roles in Better Stack.

3. Once you have all the users in the group, then go to the Applications -> Better Stack -> Assignments -> Assign -> Assign to Groups -> Find created group & Assign.

4. In the Better Stack app, go to Push Groups -> + Push Groups -> Find groups by name -> Select group -> Save.

And that's it! You should now see your newly created group in Better Stack Teams, along with all the members assigned.