User and Group Owner guide
This guide is for operators and Group Owners who work within ownership boundaries assigned by an administrator.
What you can do
Your exact actions depend on your role and assigned groups.
| Task | User or viewer | Group Owner |
|---|---|---|
| View permitted Collectors and health | Yes | Yes |
| Search groups and labels | Yes | Yes |
| Manage membership | No | Within owned groups and policy |
| Create configuration versions | No | Within owned groups |
| Submit changes for approval | No | Yes |
| Approve your own request | No | No |
| View deployment, drift, and audit evidence | Permitted scope | Owned groups |
Recommended journey
- Navigate the FleetAMP UI.
- Review managed Collectors.
- Understand groups and labels.
- Manage authorized Collector membership.
- Create configuration versions or import existing YAML.
- Submit the exact change through approvals.
- Follow deployment and rollback.
- Review drift and the audit log.
Important boundaries
- You see and operate only resources permitted by your role.
- A Collector has one ownership group.
- Labels narrow targets but do not grant ownership.
- Immutable versions and target snapshots prevent a reviewed change from silently changing.
- The requester cannot approve their own change.