Role-Based Access Controls (RBAC)

FireHydrant offers user roles to help restrict and define access to parts of the platform, enabling you to create a secure and scalable incident management process.

Users, Roles, and Definitions

Licensed and Unlicensed users

• Licensed users - Users with FireHydrant accounts and login access, split into 4 access roles (see next section)
• Unlicensed users - Everyone else. Users who cannot log in and perform the vast majority of actions with one exception.

Any user in Slack, including unlicensed, can join an incident channel, keep tabs on an open incident, and participate in conversations. However, unlicensed users can't take any actions that change the incident state, such as running most commands, posting updates, assigning/completing tasks, being assigned roles, etc.

Predefined Access Roles

FireHydrant offers four access roles out-of-box.

• Owner: Full access to the full platform, including user administration, integrations, API Keys, and other organization settings
• Member: Full access to update incident management processes, Runbooks, Settings, Teams, and Alert configurations
• Collaborator: Basic incident response access but cannot update settings or Runbooks. Same as Viewer for creating and responding to alerts if assigned
• Viewer: Read-only access to incidents and analytics in the FireHydrant web app. Ability to create and respond to alerts if they're assigned

Alerting Permissions

Analytics Permissions

Incident Management Permissions

📘

**Note

Users without private incident access (all-encompassing) can be added to individual private incidents on an ad-hoc basis by people who do have access. See Private Incidents for more information.

Integration Management Permissions

Resource Management Permissions

User Access Control Permissions

Commonly-asked questions

Can an unlicensed user access incident retrospectives?

FireHydrant's incidents and retrospectives are a part of the web application and require a license to access. Retrospectives can be exported as PDF or supported integrations like Confluence and Google Docs to be shared broadly.

For more information, visit Preview & Export Retrospectives.

Can a Viewer or non-licensed user “star” events to be included in the export timeline?

Starring events is considered a state-altering action, and subsequently is not available for the default Viewer role or anyone without Manage Incidents permission.

If a Viewer or unlicensed user posts chat messages into the incident Slack or Microsoft Teams channel, will those still be recorded by FireHydrant into the timeline

Yes, all messages in incident channels are recorded in the incident timeline regardless of who they're from.

Can a Viewer or non-licensed user be assigned action-items?

Users must at least have Manage Incidents permissions or be Collaborator+ (of the out-of-box roles).

Can a non-licensed user view the status page?

Yes. You do not need to be a licensed user on FireHydrant to view a status page.