Role-based access control

This section describes the various role and permissions management tools available to organizations.

Available roles

Organizations have 3 roles by default: Admin, member and guest.

Administrator

Organization admins have full access and control. We recommend only a few people have this control, including your infrastructure engineers.

This role is recommended for owners of their organization subscription and infrastructure engineers who might need to set up compute clusters.

Member

Members can create teamspaces, and more. This is the recommended role for most organization members.

Guest

Guests can join specific teamspaces. Guest seats are billed differently. Guests are not part of the organization, only part of a specific teamspace.

Use guest seats for contractors, outside collaborators, non engineers.

Managing roles

At a high level, we recommend you manage the roles as follows:

Role	Description	Recommended for
Administrator	Full access and control. We recommend only a few people have this control, including your infrastructure engineers.	Owners of their organization subscription and infrastructure engineers who might need to set up compute clusters.
Member	Can create teamspaces, and more. Visit the org settings to manage the role permissions.	Most people in the organization.
Guest	Can join specific teamspaces. Guest seats are billed differently. Guests are not part of the organization, only part of a specific teamspace.	Contractors, outside collaborators, non engineers.

Custom roles

Advanced role controls are available to customers in the Enterprise tier. See our pricing or contact sales for more info.

Detailed role permissions

This section breaks downs roles for each member type in the organization.

Studios, Teamspaces

Permission	Guest	Member	Admin
Create Studios in a teamspace	✅	✅	✅
Delete your own Studios	✅	✅	✅
Create a teamspace		✅	✅
Manage all teamspaces			✅
Delete any Studio			✅

Data

Permission	Guest	Member	Admin
Add data to a teamspace	✅	✅	✅
Use data shared in a teamspace	✅	✅	✅

Team members

Permission	Guest	Member	Admin
Invite new teamspace members		✅	✅
Invite a guest to the org			✅
Invite new members to the org			✅
Delete the org			✅

Credits, Billing

Permission	Guest	Member	Admin
Add credits to a teamspace			✅
Purchase credits			✅
View credit activity			✅
View + edit billing details			✅
Purchase additional seats			✅

Security

Permission	Guest	Member	Admin
Add a secret		✅	✅
Add encryption keys			✅
Set up org level cloud account			✅