Skip to content

Commit

Permalink
docs: add runner role to rbac docs (#46916)
Browse files Browse the repository at this point in the history
  • Loading branch information
teallarson authored Oct 15, 2024
1 parent e5a89ce commit de6eeaa
Showing 1 changed file with 13 additions and 12 deletions.
25 changes: 13 additions & 12 deletions docs/access-management/rbac.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,28 +7,29 @@ products: oss-enterprise, cloud-teams
Role Based Access Control allows a user with Administrative access to apply roles to users, granting different levels of permission within an Organization or Workspace.

:::info
**Self-Managed Enterprise** instances have an `Instance Admin` role in addition to the other roles outlined in this document. The first user who logs on to Airbyte in a Self-Managed Enterprise instance will be assigned this role. This user will have all permissions listed below for all workspaces and all organizations associated with their Enterptise account. To update this assigment, enterprise customers should contact [Airbyte support](https://support.airbyte.com/hc/en-us).
**Self-Managed Enterprise** instances have an `Instance Admin` role in addition to the other roles outlined in this document. The first user who logs on to Airbyte in a Self-Managed Enterprise instance will be assigned this role. This user will have all permissions listed below for all workspaces and all organizations associated with their Enterprise account. To update this assignment, enterprise customers should contact [Airbyte support](https://support.airbyte.com/hc/en-us).
:::

## Organization Resource Roles

Permissions are scoped to the given Organization for which the user has this role, and any Workspaces within.

| Permissions | Member | Reader | Editor | Admin |
| :---------------------- | :--------: | :--------: | :--------: |:--------: |
| **Read Organization**<br /><ul><li> Read individual organizations</li></ul> | X | X | X | X |
| **Create Workspace**<br /><ul><li>Create new workspace within a specified organization</li><li>Delete a workspace</li></ul> | | | X | X |
| **Update Organization**<br /><ul><li>Modify organization settings, including billing, PbA, SSO</li><li>Modify user roles within the organization</li></ul> | | | | X |
| Permissions | Member | Reader | Runner | Editor | Admin |
| :---------------------- | :--------: | :--------: | :--------: | :--------: |:--------: |
| **Read Organization**<br /><ul><li> Read individual organizations</li></ul> | X | X | X | X | X |
| **Create Workspace**<br /><ul><li>Create new workspace within a specified organization</li><li>Delete a workspace</li></ul> | | | | X | X |
| **Update Organization**<br /><ul><li>Modify organization settings, including billing, PbA, SSO</li><li>Modify user roles within the organization</li></ul> | | | | | X |

## Workspace Resource Roles
Permissions are scoped to the specific Workspace in which the user has this role.

| Permissions | Reader | Editor | Admin |
| ---------------------- | :--------: | :--------:| :--------: |
| **Read Workspace**<br /><ul><li>List the connections in a workspace</li><li>Read individual connections</li><li>Read workspace settings (data residency, users, connector versions, notification settings) </li></ul> | X | X | X |
| **Modify Connector Settings**<br /><ul><li>Create, modify, delete sources and destinations in a workspace</li></ul> | | X | X |
| **Update Connection**<br /><ul><li> Start/cancel syncs</li><li>Modify a connection, including name, replication settings, normalization, DBT</li><li>Delete a connection</li><li> Create/Update/Delete connector builder connectors</li></ul> | | X | X |
| **Update Workspace**<br /><ul><li> Update workspace settings (data residency, users, connector versions, notification settings)</li><li> Modify workspace connector versions</li></ul> | | | X |
| Permissions | Reader | Runner | Editor | Admin |
| ---------------------- | :--------: | :--------:| :--------:| :--------: |
| **Read Workspace**<br /><ul><li>List the connections in a workspace</li><li>Read individual connections</li><li>Read workspace settings (data residency, users, connector versions, notification settings) </li></ul> | X | X | X | X |
| **Sync Connection**<br /><ul><li>Start/cancel syncs and refreshes</li></ul> | | X | X | X |
| **Modify Connector Settings**<br /><ul><li>Create, modify, delete sources and destinations in a workspace</li></ul> | | | X | X |
| **Update Connection**<br /><ul><li>Modify a connection, including name, replication settings, normalization, DBT</li><li>Clear connection data</li><li>Create/Delete a connection</li><li> Create/Update/Delete connector builder connectors</li></ul> | | | X | X |
| **Update Workspace**<br /><ul><li> Update workspace settings (data residency, users, connector versions, notification settings)</li><li> Modify workspace connector versions</li></ul> | | | | X |

## Setting Roles

Expand Down

0 comments on commit de6eeaa

Please sign in to comment.