How to Manage Services

Services

Overview

• Services define Resources and the Actions or permissions on those Resources.

• Gopher includes some system Resources that consist of API endpoints for the Gopher Dashboard and Actions for each.

• Gopher Security will be supporting additional Resource types in a future release that can be applied to limit User access to Resources within a peer-to-peer network.

• Gopher customers can also import their own API endpoints and Actions into the Gopher dashboard.

• A Policy is required to enforce permissions on Resources in a Service.

Viewing Services

1. Sign in to the Gopher dashboard. If you do not have a Gopher account, refer to Sign Up for Gopher Dashboard for instructions.

2. From the Gopher dashboard home page, click Services.

Services menu in the Gopher Dashboard

1. The following Services are added to the Gopher Dashboard by the system then referenced from Gopher system Policies that enforces permissions on various modules of the Gopher dashboard.

• ServiceModuleService

• NetworkService

• IAMUserService

• IAMPolicyService

• IAMOrganizationService

• IAMGroupService

• BillingService

Note: System generated Services cannot be modified or removed as this would prevent the root user from being able to manage the system.

1. Click a Service to view the Resources and Actions associated with the Service.

Resources

Overview

• Resources are used to define the Actions that can act upon them.

• Gopher includes some pre-defined system Resources that consist of API endpoints for the Gopher Dashboard.

• Currently, the only Resources that are supported are API endpoints.

• Additional Resource types will be supported in a future release to include network ports and protocols, devices and postures, files, applications, executables, etc.

Viewing Resources

1. To view system Resources that allow access to the functions in the Gopher Dashboard go to Services and select Resources.

2. From the drop-down menu at the top of the Resources section select a service to see its associated Resources.

Actions

Overview

• Actions define the permissions for Resources in Service policies.

• There are three available actions: List, Read and Write.

• Each Resource in a Service policy needs to have one or more Actions defined for it to allow access to the Resource.

Viewing/editing and Removing existing Actions

1. Manage Actions from the Services menu by clicking Actions.

2. Select a Service from the drop-down menu to view the Actions associated with each Service.

1. Enter a Name and Description for the Actions.

2. Expand the Services section and select a Service.

3. Expand the Actions section and click List, Read or Write. (A separate policy needs to be created for each Action type, even if you are applying it to the same Resource(s).)

4. Expand the Resources section. The Resources that were previously defined for the Service will be listed. Select one or more Resources that the Action you select in Step 4 should apply to by checking Any in this Account.

5. Click Create Action.

6. Once you have created the Action you will see it listed in the Actions page for the corresponding Service.

Actions associated with Services

1. Repeat Steps 1-6 to create additional Actions for Resources > Services.