Access Lists
Access Lists allow Teleport users to be granted long term access to resources managed within Teleport. With Access Lists, administrators and Access List owners can regularly audit and control membership to specific roles and traits, which then tie easily back into Teleport's existing RBAC system.
Review Access List grants
Teleport Identity Security can show you which identities reach which resources
through their Access List memberships, and whether that access has actually been
used. See Review Identity Access from the
CLI (tctl access-review). For
example, to see what the Prod Admins Access List grants and who holds it:
tctl access-review --query "SELECT * FROM access_path WHERE identity_group IN ('Prod Admins')"
Getting Started with Access Lists
Three guided flows for creating Access Lists:
Was this page helpful?