Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified public/docs/security/authentication/images/3277967.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified public/docs/security/authentication/images/3277968.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file not shown.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file not shown.
Binary file modified public/docs/security/authentication/images/enableguests1.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified public/docs/security/authentication/images/enableguests2.jpg
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified public/docs/security/authentication/images/enableguests2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified public/docs/security/authentication/images/guestuser.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified public/docs/security/cve/shattered-console.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file not shown.
Binary file not shown.
Binary file modified public/docs/security/exposing-octopus/images/letsencrypt.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified public/docs/security/users-and-teams/images/3277947.png
Diff not rendered.
Binary file modified public/docs/security/users-and-teams/images/add-adlogin.png
Binary file modified public/docs/security/users-and-teams/images/add-role.png
Binary file modified public/docs/security/users-and-teams/images/add-team.png
Binary file modified public/docs/security/users-and-teams/images/change-pwd.png
Binary file modified public/docs/security/users-and-teams/images/changeuserpwd.png
Binary file modified public/docs/security/users-and-teams/images/devdeployerteam.png
Binary file modified public/docs/security/users-and-teams/images/enter-new-pwd.png
Binary file modified public/docs/security/users-and-teams/images/newpassword.png
Binary file modified public/docs/security/users-and-teams/images/resetpassword.png
Binary file modified public/docs/security/users-and-teams/images/roles-link.png
Binary file modified public/docs/security/users-and-teams/images/select-user.png
Binary file modified public/docs/security/users-and-teams/images/teams.png
Binary file modified public/docs/security/users-and-teams/images/user-invites.png
Binary file modified public/docs/security/users-and-teams/images/usersearch.png
Binary file modified public/docs/security/users-and-teams/teams-create-new.png
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ navOrder: 1

Sometimes, a team will be granted contributor access to a project, but be restricted in the environments that it can access. By default, Octopus's security system will then prevent members of the team editing [variables](/docs/projects/variables) that apply outside of their allowed environments. During development this can be inconvenient, as variables frequently need to be added in support of new application features.

## Why restrict editing of unscoped variables? {#Securityandun-scopedvariables-Whyrestricteditingofun-scopedvariables?}
## Why restrict editing of unscoped variables? {#why-restrict-editing-of-unscoped-variables}
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I followed the same approach Steve Fenton used in this previous PR where we encountered this: 2bd1155#diff-1e8a102c0408e76c53dd207562893eff2122c73073bd5e5f1da9dbb7f399b467

And confirmed there's no anchor link references to these that needed updating.


Octopus uses variables to control almost every aspect of the deployment process. This provides a great deal of flexibility - for example, variables can control:

Expand All @@ -23,15 +23,9 @@ The default permissions applied to unscoped variable editing are restrictive bec

This default behavior can be changed by granting an additional permission to the team.

## Granting unscoped variable editing permission {#Securityandun-scopedvariables-Grantingun-scopedvariableeditingpermission}
## Granting unscoped variable editing permission {#granting-unscoped-variable-editing-permission}

As an administrator, open **Configuration ➜ Teams**, and select the **Roles** item in the tool area:

:::figure
![](/docs/security/users-and-teams/images/3277948.png)
:::

In the list of user roles shown, either create a new role to assign to the team, or select a built-in role like **Project contributors** to modify.
As an administrator, open **Configuration ➜ User Roles**. In the list of user roles shown, either create a new role to assign to the team, or select a built-in role like **Project contributors** to modify.

:::figure
![](/docs/security/users-and-teams/images/3277947.png)
Expand Down