Skip to main content

Namespaces

A namespace is a logical grouping of resources. It is an organizational tool, not an authorization boundary.

What a namespace contains​

A namespace groups resources only. Resource Types, Subjects, Roles, Groups, and Policies all exist at the tenant level — not inside a namespace.

Namespaces and authorization​

Namespace membership has no effect on authorization evaluation. When Vengtoo evaluates an access request, it checks whether a policy links to the resource (or its type) — not which namespace the resource is in.

The default namespace​

Every tenant has a default namespace. Resources created without an explicit namespace are placed there automatically.

Creating a namespace​

In the dashboard, namespaces are created inline. When creating a resource, type a new namespace name in the namespace field and press Enter.

If you manage your infrastructure with Terraform:

resource "vengtoo_namespace" "crm" {
  name        = "crm"
  description = "CRM service resources"
}