Enabling Experimental Infosec Levels
Experimental Feature
This feature is experimental and subject to change. We welcome feedback!
Infosec levels are used to describe access control for classified files. The Istari Platform supports the DOD's infosec schema.
IT Setup
To enable the experimental infosec level feature, add the following environment variables:
Istari Registry Service
FILE_SERVICE_FEATURE_FLAGS_INFOSEC_ENABLED: "true"
Istari Frontend
VITE_INFOSEC_ENABLED: "true"
Enabling Infosec Levels via Admin Panel
- An Istari Platform Administrator must enable Infosec Levels via the Admin Panel.
- When enabling, the Istari Platform Administrator will set a maximum level and a default level for new resources.
caution
Infosec Levels cannot be disabled after being enabled.
Configuring Maximum and Default Levels
- The maximum and default level can be changed after initial setup.
- The Istari Platform will prevent Administrators from downgrading the maximum infosec level below the highest level of any artifact, model, or system within it.
- The default level can be set at any level up to and including the maximum level.
Granting Infosec Levels to Users
- All users hold the UNCLASSIFIED infosec level by default.
- The Istari Platform Administrator may grant an infosec level to users other than UNCLASSIFIED.
- An unprivileged user cannot view or assign an infosec level that is higher than what has been granted by an Istari Platform Administrator.