How-to-enable-enhanced-rbac-on-turbine-26
How to Enable Enhanced RBAC on Turbine 26.4.3 On-Prem
1. Prerequisites
- Take a platform snapshot.
- Log in to Turbine as a Super Admin.
- Have the Turbine hostname and target account ID ready.
2. Prepare Postman authentication
- Configure Basic Auth as used during the call.
- In the browser, open Developer Tools β Network.
- Select an authenticated Turbine request and locate JWT=<token> in its request headers.
- Copy the JWT session cookie into Postman for the same Turbine hostname:
Cookie: JWT=<token>3. Execute both requests in order
Select PUT, leave the body empty, and replace the placeholders.
First, enable the migration flag:
PUT https://{host}/tenant/api/feature-flag/{account-id}/EnhancedRbacDataMigration?enabled=trueThen, enable Enhanced RBAC:
PUT https://{host}/tenant/api/feature-flag/{account-id}/EnhancedRbac?enabled=true4. Validate
- Confirm both requests return successful responses.
- Log out of Turbine and log back in.
- Verify Enhanced RBAC is available, and permissions work as expected.
Migration check:
kubectl -n default logs -l app=identity-rbac-migration --tail=200This is how it looks in the roles:
