Skip to content

Commit 53b29cd

Browse files
committed
Mike feedback
1 parent efbaf0d commit 53b29cd

File tree

5 files changed

+6
-6
lines changed

5 files changed

+6
-6
lines changed
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
Either the [Cluster Operator]({% link cockroachcloud/authorization.md %}#cluster-operator) or [Cluster Admin]({% link cockroachcloud/authorization.md %}#cluster-admin) role on a pre-existing cluster, or the [Cluster Creator](authorization.html#cluster-creator) role in order to create a new cluster.
1+
Either the [Cluster Operator]({% link cockroachcloud/authorization.md %}#cluster-operator) or [Cluster Admin]({% link cockroachcloud/authorization.md %}#cluster-admin) role on an existing cluster, or the [Cluster Creator](authorization.html#cluster-creator) role in order to create a new cluster.
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
{{site.data.alerts.callout_info}}
2-
Only [Organization Admins]({% link cockroachcloud/authorization.md %}#organization-admin) and [Cluster Admins]({% link cockroachcloud/authorization.md %}#cluster-admin) can create SQL users and issue credentials.
2+
Only [Organization Admins]({% link cockroachcloud/authorization.md %}#organization-admin) and [Cluster Admins]({% link cockroachcloud/authorization.md %}#cluster-admin) can create SQL users using the {{site.data.products.cloud}} Console or API. These SQL users default to the `Admin` role. For granular provisioning of SQL user privileges, refer to documentation on [using the cluster's SQL interface]({% link cockroachcloud/managing-access.md %}?filters=client#create-a-sql-user).
33
{{site.data.alerts.end}}

src/current/_includes/cockroachcloud/org-roles/cloud-roles-table.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ The following table describes the high level permissions given by each Cockroach
55
| `Organization Member` | None | None | None | None | None | None | None | None | None |
66
| `Organization Admin` | Manage users and service accounts, assign and revoke roles | None | None | None | None | None | None | None | Manage [enterprise (self-hosted) licenses]({% link {{ site.current_cloud_version }}/licensing-faqs.md %}#obtain-a-license), manage email alerts |
77
| `Billing Coordinator` | None | Manage billing | None | None | None | None | None | None | None |
8-
| `Cluster Operator` | None | None | Scale nodes, upgrade CockroachDB | Manage Databases | View metrics / insights / logs / jobs | Manage network auth, configure SQL SSO, view PCI status | View / restore backups | None | Access DB console, configure maintenance windows, send test alerts |
8+
| `Cluster Operator` | None | None | Scale nodes, upgrade CockroachDB | Manage databases | View metrics / insights / logs / jobs | Manage network auth, configure SQL SSO, view PCI status | View / restore backups | None | Access DB console, configure maintenance windows, send test alerts |
99
| `Cluster Admin` | Manage SQL users, manage service accounts, assign user roles | None | Create / edit / delete cluster, scale nodes, upgrade CockroachDB | Manage databases | View metrics / insights | Manage network auth, configure SQL SSO, view PCI status | View / restore backups | None, unless role is assigned with organization scope | Access DB console, configure maintenance windows |
1010
| `Cluster Creator` | None | None | Create cluster (assigns `Cluster Admin` role for that cluster), edit / delete clusters created by this user | None | None | None, unless role is assigned with organization scope | None | None, unless role is assigned with organization scope | None |
1111
| `Cluster Developer` | None | None | None | None | None | None | None | None | Access DB console, view cluster details |

src/current/cockroachcloud/folders.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -99,7 +99,7 @@ To create clusters in a folder, the member must also have the `CLUSTER_ADMIN` or
9999
100100
To assign the `FOLDER_ADMIN` role:
101101
102-
1. On the **Access Management** page, locate the team member's details whose role you want to change.
102+
1. On the **Access Management** page, locate the team member whose role you want to change.
103103
1. In the row for the target member, click the three-dots **Action** button and select **Edit Roles**.
104104
1. Set **Scope** to **Organization** or to a folder in the hierarchy. The role is assigned on all of the folder's descendants.
105105
1. Set **Role** to **Folder Admin** or **Folder Mover**.

src/current/cockroachcloud/managing-access.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ In the CockroachDB {{ site.data.products.cloud }} Console, users must be assigne
4646

4747
To edit a user's role, perform the following steps:
4848

49-
1. On the **Access Management** page, locate the team member's details whose role you want to change. The **Role** column lists current roles assigned to each user.
49+
1. On the **Access Management** page, locate the team member whose role you want to change. The **Role** column lists current roles assigned to each user.
5050
1. In the row for the target member, click the three-dots **Action** button and select **Edit Roles**.
5151
1. A number of fine-grained roles can be assigned to a given user. Each role is represented by a row. Each row has a **scope**, which is one of **Organization**, the name of a particular [folder]({% link cockroachcloud/folders.md %}), or the name of a particular cluster. If the role is Cluster Admin, Cluster Operator, or Cluster Developer, assigning it at the organization scope means that it applies to all clusters in the organization.
5252

@@ -66,7 +66,7 @@ An [Organization Admin]({% link cockroachcloud/authorization.md %}#organization-
6666

6767
### Revoke a pending invite
6868

69-
1. On the **Access Management** page, locate the team member's details whose pending invite you want to revoke.
69+
1. On the **Access Management** page, locate the team member whose pending invite you want to revoke.
7070
1. In the **Action** column, click the three dots to view the allowed actions.
7171
1. Click **Revoke Invite**.
7272

0 commit comments

Comments
 (0)