organizations.md

Organization roles

You can assign members of an organization roles, which function like user roles. There are five roles available:

Role	Description
Organization super manager	Grants full administrative access to the organization and the ability to manage its images and members. Can view, modify, and delete workspaces belonging to members of the organization.
Organization manager	Grants create, view, modify, and delete to the organization's images, image tags, and registries.
Organization image manager	Grants create, view, modify, and delete to the organization's images, and image tags.
Organization importer	In addition to basic organization access, can create new images assigned to the organization.
Organization member	Grants basic organization access. Can use and view images belonging to the organization. Can only access workspaces within their organization.

Please note that roles are defined per organization. Therefore, assigning someone as an organization manager does not change their role in another organization.

Organization super manager permissions

	Create	Read (all)	Read (own)	List	Delete (all)	Delete (own)	Update (all)	Update (own)
Dev URLs		X
Workspaces	X	X	X		X	X	X	X
Images	X	X			X		X
Image tags	X	X			X		X
Metrics		X	X
Org members	X	X		X	X		X
Orgs		X		X
Registries	X	X			X		X
System banners		X
Users		X	X

Organization manager permissions

	Create	Read (all)	Read (own)	List	Delete (all)	Delete (own)	Update (all)	Update (own)
Dev URLs		X
Workspaces	X	X	X			X		X
Images	X	X			X		X
Image tags	X	X			X		X
Metrics		X	X
Org members				X
Orgs		X		X
Registries	X	X			X		X
System banners		X
Users		X	X

Organization image manager permissions

	Create	Read (all)	Read (own)	List	Delete (all)	Delete (own)	Update (all)	Update (own)
Dev URLs		X
Workspaces	X		X			X		X
Images	X	X			X		X
Image tags	X	X			X		X
Metrics			X
Org members				X
Orgs				X
Registries		X
System banners		X
Users			X

Organization importer permissions

	Create	Read (all)	Read (own)	List	Delete (all)	Delete (own)	Update (all)	Update (own)
Dev URLs		X
Workspaces	X		X			X		X
Images	X	X
Image tags	X	X
Metrics			X
Org members				X
Orgs				X
Registries		X
System banners		X
Users			X

Organization member permissions

	Create	Read (all)	Read (own)	List	Delete (all)	Delete (own)	Update (all)	Update (own)
Dev URLs		X
Workspaces	X		X			X		X
Images		X
Image tags		X
Metrics			X
Org members				X
Orgs				X
Registries		X
System banners		X
Users			X