Cybersecurity News that Matters

Cybersecurity News that Matters

DigitalOcean Announces Enhanced Role-Based Access Control to Streamline Company and Security Operations

by Business Wire

Aug. 27, 2024
9:08 PM GMT+9

New offering provides robust and efficient method for managing user access

NEW YORK–(BUSINESS WIRE)–DigitalOcean Holdings, Inc. (NYSE: DOCN), the developer cloud optimized for startups and growing digital businesses, today announced updates to its role-based access control (RBAC), a method for managing user access to systems and resources within an organization by assigning permissions to roles rather than to individual users. Today’s updates are highlighted by a new set of predefined roles that make it easier for DigitalOcean administrators to provide a customizable level of access to their individual users. With this feature release, customers can now easily access this new set of predefined roles in the DigitalOcean Cloud Console.


RBAC builds on identity and access management (IAM), which helps to ensure the right individuals have the appropriate access to technology resources within an organization. With RBAC, users are assigned roles based on their job responsibilities, qualifications, and expectations. The new predefined roles announced today build on the existing basic roles (owner, member and biller), and are designed to fit the most common use cases requested by customers. They include:

  • Modifier: This role permits users to update but does not allow them to delete resources. It is ideal for teams that wish to protect sensitive resources from deletion while still allowing members to manage them.
  • Billing viewer: Permits read-only access to billing information only, giving users insight into billing details for cost analysis, transparency, and governance without exposing sensitive operational controls.
  • Resource viewer: This role permits read-only access to resources, ideal for audit or compliance purposes. Users with this role will not have permission to create, update, or delete resources.

This approach simplifies permission management and helps to enhance security by ensuring that users have only the access necessary to perform their job functions.

“Scaling your business means adding developers and other job functions to your teams, but we believe that should not mean adding complexity in managing identity and access. With our new predefined roles, you can assign privileges in a way to minimize risk, and meet audit or compliance requirements,” said Tyler Healy, CISO at DigitalOcean. “We’re excited to bring additional security and identity features that simplify cloud security, so developers can spend more time innovating.”

In the coming months, DigitalOcean will be releasing several features to strengthen its IAM offerings:

  • Per-bucket Spaces access keys: Spaces bucket access keys on a per-bucket basis.
  • RBAC custom roles: Allows customers to configure custom, persistent, reusable permission sets for their business needs which are not met by RBAC predefined roles.

About DigitalOcean

DigitalOcean simplifies cloud computing so businesses can spend more time creating software that changes the world. With its mission-critical infrastructure and fully managed offerings, DigitalOcean helps developers at startups and growing digital businesses rapidly build, deploy and scale – whether creating a digital presence or building digital products. DigitalOcean combines the power of simplicity, security, community and customer support so customers can spend less time managing their infrastructure and more time building innovative applications that drive business growth. For more information, visit digitalocean.com.

Contacts

Media
Dan Jensen

[email protected]

Investors
Melanie Strate

[email protected]

Subscription

Subscribe to our newsletter for the latest insights and trends. Tailor your subscription to fit your interests:

By subscribing, you agree to our Privacy Policy. We respect your privacy and are committed to protecting your personal data. Your email address will only be used to send you the information you have requested, and you can unsubscribe at any time through the link provided in our emails.

  • Business Wire

    Business Wire, a Berkshire Hathaway company, is the global leader in press release distribution and regulatory disclosure. Public relations, investor relations, public policy and marketing profession...

    View all posts
Author:
Stay Ahead with The Readable's Cybersecurity Insights