Roles and permissions
Create custom roles, set permissions, and manage member access.
Default Admin role
Every organization has a default Admin role with full access to organization resources. It cannot be edited or deleted.
Create a custom role
- Open the organization.
- Go to Roles.
- Click Create role.
- Enter a Name.
- Choose the access scope:
- General: access to every resource of a type.
- Assets: access to specific resources.
- Select the permissions.
- Click Save.
Permissions
For each resource type you can assign:
| Permission | Effect |
|---|---|
| all | Every action on the resource |
| create | Create a new resource |
| view | View the resource |
| delete | Delete the resource |
| console | Access the server console |
| view settings | View settings |
| edit settings | Change settings |
| view pipelines | View pipelines |
| edit pipelines | Run and change pipelines |
| logs | View logs |
Resource types: Servers, Projects, Quick Apps, Volumes, and S3 Buckets.
Financial access
Financial access is separate from resource access. A member without financial access cannot open the Finance section or the organization bills. Set it through the role permissions or the default Admin role.
Assign roles to members
- Go to Members.
- Click Edit member roles.
- Choose the role or roles.
- Save the changes.
A member sees only the resources their role allows. Role changes apply to subsequent access immediately.
Only the organization owner and admins can create or change roles.