Role-based access control for Infrastructure

Teleport RBAC lets your security team to manage access to infrastructure through a central directory of users, roles, and teams.

Role-Based Access Control (RBAC) for Infrastructure

Role-Based Access Control (RBAC) is the practice of managing privileged access to infrastructure through a central directory of users, roles, and teams. Authorization is granted to groups (or roles) within a company directory. This allows individuals to access secured infrastructure by simply authenticating their identity, usually through a Single Sign-on (SSO) solution tied to the directory.

Teleport supports all major SSO providers, including Okta, Sailpoint, Active Directory, OneLogin, G Suite, Auth0 and many others.

Who can Benefit from RBAC?

Using RBAC instead of individually-managed authorization and authentication methods (such as SSH keys or VPN logins) means companies can now control user group permissions within their organization but also grant controlled and seamless access to third-party teams. This is useful for:

Company-wide compliance teams overseeing multiple infrastructure and engineering groups who use both Kubernetes and SSH.

Manage service providers (MSPs) that manage Kubernetes and generic server clusters for clients.

Remote support teams from software vendors who wish to manage remote on-site Kubernetes clusters.

Internet-of-Things (IoT) edge cloud management from a centralized location.

Meet Compliance Requirements

  • RBAC is used to secure the infrastructure and meet compliance requirements around privileged (SSH) access. Specifically, it enables security and systems engineers to enforce security and compliance policies such as:
  • Multi-factor authentication (MFA). Integrating with company-wide SSO enables two-factor authentication (2FA) for SSH sessions using the same access control plane, simplifying management and audit.
  • Enforce infrastructure and data compliance. Isolate production environments and production data from specific roles and teams, or limit access to certain roles and teams. Enforce policies like "Developers must never see production data with ease".
  • Compliant process for onboarding and transferring employees. Ensure privileged access permissions stay up-to-date as individuals switch roles or leave the company.
  • Prohibit root access for all roles. Teleport RBAC allows security administrators to remove the need to use root privileges. RBAC also separates SSH permissions management from server management.
  • Overall, the result of implementing RBAC is a reduction in operational overhead. Administrators can control (add, modify, and revoke) privileged access for teams or individuals from one place, while users can get access authorization without needing to manage SSH keys or VPN credentials.

Which Teleport offering is right for you?

Teleport is available through the free, open source Community Edition or our Commercial Offerings.

Community Free and Open-Source Edition Pro Enhanced Features and Support Enterprise Enterprise Grade Security, Compliance and Support
Identity-Based Authentication ? CommunityUses local users or Github Pro Enterprise
Multi-cloud Authentication ? Community Pro Enterprise
Kubernetes & SSH integration ? Community Pro Enterprise
Security Audit Logging ? Community Pro Enterprise
Session Recording ? Community Pro Enterprise
Dynamic Permissions ? Community Pro Enterprise
Support for IoT devices ? Community Pro Enterprise
Trust Federation ? Community Pro Enterprise
Multi-factor Authentication ? Community Pro Enterprise
Web-based client ? Community Pro Enterprise
Command line client ? Community Pro Enterprise
Single Sign-On ? CommunityOnly with Github SSO pro enterprise
Role Based Access Controls ? Community pro Enterprise
Support Channels communityGithub Issues and
Community Forum
proEmail and ticket support enterprisePrioritized email, phone and dedicated Slack/IM channel
Support Availability community proBusiness hours (PT) enterprise24/7 with response time guarantees
Backwards Compatibility (LTS) community proSupport for most recent LTS version enterpriseAll LTS versions are supported for 24-months
Regulation Compliance Support community pro enterpriseFedRamp, HIPAA, PCI, SOC2 and others
  Download Community Demo Pro Demo Enterprise

This site uses cookies to improve service. By using this site, you agree to our use of cookies. More info.