User Management

User Accounts

prokube uses Keycloak as the central identity provider. User accounts are created and managed in Keycloak by an administrator. For details on user and access management, refer to the IAM User Management admin documentation.

Workspaces

Workspaces are the primary unit for organizing access to resources and data. Each workspace corresponds to a Kubernetes namespace and is managed through Keycloak realm roles.

Users can be assigned to multiple workspaces, and each workspace can have multiple users. Every user assigned to a workspace has editor privileges within it. Workspace access is granted and revoked by an administrator in Keycloak.

Workspace selection

If you have access to multiple workspaces, you can select the active workspace in the Kubeflow web UI. The active workspace is displayed in the top left side.

You can switch the active workspace by clicking on the workspace name and selecting the desired workspace from the dropdown list.

Access management

Do not use the 'Manage Contributors' UI

The Kubeflow dashboard exposes a "Manage Contributors" menu item. This is a legacy feature and should not be used. Contributor management is handled exclusively by administrators in Keycloak. Changes made through the UI may be overwritten and can cause inconsistencies with the platform's access control.

To request access to a workspace, or to have a user added or removed, contact your platform administrator. Administrators manage workspace access by assigning Keycloak realm roles as described in the IAM User Management documentation.