You can assign roles to users. These roles can be set manually through the application or they can be mapped in from your identity provider if you have SSO integration enabled.
The available roles are:
-
SysAdmin
-
ProjectManager
-
SupportStaff
-
System Librarian
| Permission | System Admin | Support Staff | System Librarian | Project Manager (Organization) |
|---|---|---|---|---|
View Dispatcher | X | X | ||
Stop Runs | X | X | ||
Launch/Stop/Start Executors | X | X | ||
Edit Hardware Tier/Executor Configuration | X | X | ||
View Logs | X | X | ||
View Usage | X | X | ||
Upgrade/Stop/Restart Server | X | X | ||
Manage API Endpoints | X | X | ||
Manage Project Tags | X | X | X | |
List All Projects | X | X | X | |
Preview Projects | X | X | X | |
Curate Projects | X | X | X | |
Edit Global Compute Environment | X | |||
Edit Configuration Details | X | |||
Manage Organizations | X | |||
View Control Center | X | |||
Global Project Access | X | |||
Global Model APIs Access | X | |||
Run MongoDB Commands | X | |||
Manage User Roles | X | |||
Manage Datasets | X | |||
View Assets | X | X |
A System Admin user can grant access roles to other users. To do so, visit the admin page and click Users from the top menu. Locate the user you want to grant permissions to, click Edit next to the username, then select the desire role.
When Project Managers are members of organizations, their role grants them owner-level access to all projects that are owned by other members of the organizations. This allows the Project Manager to see these projects and their assets in the Projects Portfolio and Assets Portfolio.
The Project Manager might also have the ability to add users to these organizations, thereby gaining contributor access to those users' projects. For this reason, Project Manager must be treated as a highly privileged role, similar to System Administrator.