docs/docker-trusted-registry/user-management/create-and-manage-teams.md

64 lines
2.2 KiB
Markdown

---
description: Learn how to manage teams to enforce fine-grain access control in Docker
Trusted Registry.
keywords:
- docker, registry, security, permissions, teams
menu:
main:
identifier: dtr-create-teams
parent: dtr_menu_user_management
weight: 30
title: Create and manage teams
---
# Create and manage teams
You can extend the user's default permissions by granting them fine-grain
permissions over image repositories. You do this by adding the user to a team.
A team defines the permissions a set of users have for a set of repositories.
To create a new team, go to the **DTR web UI**, and navigate to the
**Organizations** page.
Then **click the organization** where you want to create the team. In this
example, we'll create the 'billing' team team under the 'whale' organization.
![](../images/create-and-manage-teams-1.png)
Click '**+**' to create a new team, and give it a name.
![](../images/create-and-manage-teams-2.png)
## Add users to a team
Once you have created a team, **click the team** name, to manage its settings.
The first thing we need to do is add users to the team. Click the **Add user**
button and add users to the team.
![](../images/create-and-manage-teams-3.png)
## Manage team permissions
The next step is to define the permissions this team has for a set of
repositories. Navigate to the **Repositories** tab, and click the
**Add repository** button.
![](../images/create-and-manage-teams-4.png)
Choose the repositories this team has access to, and what permission levels the
team members have.
![](../images/create-and-manage-teams-5.png)
There are three permission levels available:
| Permission level | Description |
|:-----------------|:-----------------------------------------------------------------|
| Read only | View repository and pull images. |
| Read & Write | View repository, pull and push images. |
| Admin | Manage repository and change its settings, pull and push images. |
## Where to go next
* [Create and manage users](create-and-manage-users.md)
* [Create and manage organizations](create-and-manage-orgs.md)