Skip to main content

​
What It Does

Monk controls who can do what across your organization. You define roles with fine-grained permissions, assign them to team members, and every action gets logged. That’s it. No policy files, no YAML, no third-party auth layer.

​
RBAC

You create custom roles. Each role gets explicit permissions over specific resources. Permissions are actions matched against resource patterns. Enforcement happens server-side, so it doesn’t matter whether someone’s using the extension or hitting the backend directly. Resource types:
  • Templates, Secrets, Images (environment-scoped)
  • Builds, Clusters, Workspaces
  • Org members, Org roles, Org settings
  • Audit (team or self scope)
Actions:
  • read, write, admin, *
  • deploy (templates), use (secrets)
Permission patterns: Glob patterns give you flexible matching:
  • /templates/** — all templates
  • /environments/staging/secrets/** — secrets in staging only
  • /clusters/** — all clusters
  • /audit/team/** — team-wide audit events

​
Managing RBAC in the UI

Open the Organization panel and click Manage Roles. Creating roles:
  1. Click Create new
  2. Enter role name and description
  3. Add permissions — select resource type, action, and optional environment
  4. Click Create Role
Assigning roles: In the Organization panel overview, use the Assign Role card. Pick a member, pick a role, click Assign. Viewing member roles: Monk RBAC The Members table shows each member’s assigned roles at a glance.

​
Managing RBAC via Chat

You can do all of this through chat too. 
list roles for my organization

create a role called deployer with deploy access to /templates/**

give Alice the deployer role

does Bob have access to /secrets/**?

show my current permissions

​
Audit Logging

Every action in your organization gets recorded. Builds, deployments, cluster operations, secret changes — all of it, with actor, status, and trace info attached. How to view:
  • Welcome screen: Recent events show up in the Team Events card.
  • Activity panel: Open it from the Monk Dashboard for the full timeline.
Owners and admins see team-wide activity. Everyone else sees their own.

​
Not Available Yet

Single sign-on, domain enforcement, and org-wide 2FA aren’t available yet.

Team Collaboration

Organizations, members, and shared clusters

Multiple Environments

Environment-scoped permissions and isolation