Security, control & accountability of role-based access control (RBAC)

Modern infrastructure is made up of a range of technologies managed by distributed teams. Puppet Enterprise includes powerful role-based access control (RBAC) so you can give your teams the space to work freely and safely. RBAC also lets you make sure your organization is complying with its security policies and can demonstrate that compliance.


Role-based access control team delegation

Assign permissions to individuals and groups. Safely delegate tasks to the right people in line with your company policies. Puppet Enterprise provides granular permissions so you can ensure the right people have access to the right machines — and to those machines only.

manage access

A single platform for infrastructure and application teams

It's much easier for your infrastructure, middleware and application teams to collaborate when they're all using the same management platform. But you have to make sure they don't tread on each other's work. Role-based access control lets you set the guard rails so the teams can work together easily — and safely.
Single Platform

Role-based access control audit trails ensure compliance

Track who made changes and create audit logs of actions taken. Now, anyone who needs to can trace what happened, when, and who was involved, and you can show auditors evidence of complete traceability.
Create audit trails

Save time managing users and groups

Puppet Enterprise integrates with directory services like Active Directory and OpenLDAP so you have a single source of truth for managing users and groups.
Puppet Integrates

Related blog updates

Introducing Puppet Discovery™ 1.6 and Vulnerability Remediation Beta

Puppet Discovery 1.6 is now localized for Japanese, supports OpenStack, and is the foundation for a new private beta for vulnerability remediation.

Secret agents, man: secrets store integrations in Puppet 6

Learn how Puppet 6 makes it easy to use secrets from stores like HashiCorp Vault, Cyberark Conjur and AIM, Azure Key Vault and AWS Secrets Manager.

My journey to securing sensitive data in Puppet code

My journey through eyaml, the Sensitive data type, and node_encrypt to better secured secrets in Puppet... turns out it's easier than I thought.

Impact of Puppet Forge security updates in response to Sweet32 attack

We recently updated the cipher suite on the Puppet Forge servers. Most users won’t be impacted, but read this post for more details.

Get Puppet Enterprise on up to 10 nodes for free.