Role to access session recordings from other users

[jamshidyerzakov]

Hello

I would like to ask is it possible to create a role to access session recordings from other users. Now it's impossible to view other users' recordings with default teleport-admin roles (access, editor). Can you help me with some documentation or reference?

Teleport version: v9.2.4

[webvictim]

This is the default role that allows a user to view their own session recordings:

kind: role
metadata:
  name: view-own-recordings
spec:
  allow:
    rules:
    - resources:
      - session
      verbs:
      - read
      - list
      where: contains(session.participants, user.metadata.name)
  deny: {}
version: v5

You can modify this role by removing the where clause to allow ALL session recordings to be viewed:

kind: role
metadata:
  name: view-all-recordings
spec:
  allow:
    rules:
    - resources:
      - session
      verbs:
      - read
      - list
  deny: {}
version: v5

[jamshidyerzakov]

Thank you for the quick response!

[nagalakshmi896]

Please apply above role to the user. To verify if the permissions have been updated, the user will need to log out and log back in to see the changes take effect.