Manage Harbor system if you are the system administrator:
Manage users.
Manage destinations.
Manage replication policies.
Pull and push images using Docker client.
Delete repositories.
###Harbor提供RBAC (Role Based Access Control)能力
Guest: Guest has read-only privilege for a specified project.
Developer: Developer has read and write privileges for a project.
ProjectAdmin: When creating a new project, you will be assigned the "ProjectAdmin" role to the project. Besides read-write privileges, the "ProjectAdmin" also has some management privileges, such as adding and removing members.
SysAdmin: "SysAdmin" has the most privileges. In addition to the privileges mentioned above, "SysAdmin" can also list all projects, set an ordinary user as administrator and delete users. The public project "library" is also owned by the administrator.
Anonymous: When a user is not logged in, the user is considered as an "anonymous" user. An anonymous user has no access to private projects and has read-only access to public projects.
在我们的生产环境中,不会启动Anonymous用户。
###Harbor支持2种Project Types
Public: All users have the read privilege to a public project, it‘s convenient for you to share some repositories with others in this way.
Private: A private project can only be accessed by users with proper privileges.