Skip to content

Commit efbaf0d

Browse files
committed
Ayushi feedback
1 parent 85867fc commit efbaf0d

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

src/current/_includes/cockroachcloud/org-roles/cloud-roles-table.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,21 +3,21 @@ The following table describes the high level permissions given by each Cockroach
33
| **Role name** | **User management** | **Billing management** | **Cluster management** | **Database management** | **Monitoring & observability** | **Security & access** | **Backup & restore** | **Folder management** | **Other permissions** |
44
|---|---|---|---|---|---|---|---|---|---|
55
| `Organization Member` | None | None | None | None | None | None | None | None | None |
6-
| `Organization Admin` | Manage users and service accounts, assign and revoke roles | None | None | None | None | None | None | None | Manage email alerts (maintenance/issues) |
6+
| `Organization Admin` | Manage users and service accounts, assign and revoke roles | None | None | None | None | None | None | None | Manage [enterprise (self-hosted) licenses]({% link {{ site.current_cloud_version }}/licensing-faqs.md %}#obtain-a-license), manage email alerts |
77
| `Billing Coordinator` | None | Manage billing | None | None | None | None | None | None | None |
88
| `Cluster Operator` | None | None | Scale nodes, upgrade CockroachDB | Manage Databases | View metrics / insights / logs / jobs | Manage network auth, configure SQL SSO, view PCI status | View / restore backups | None | Access DB console, configure maintenance windows, send test alerts |
99
| `Cluster Admin` | Manage SQL users, manage service accounts, assign user roles | None | Create / edit / delete cluster, scale nodes, upgrade CockroachDB | Manage databases | View metrics / insights | Manage network auth, configure SQL SSO, view PCI status | View / restore backups | None, unless role is assigned with organization scope | Access DB console, configure maintenance windows |
1010
| `Cluster Creator` | None | None | Create cluster (assigns `Cluster Admin` role for that cluster), edit / delete clusters created by this user | None | None | None, unless role is assigned with organization scope | None | None, unless role is assigned with organization scope | None |
1111
| `Cluster Developer` | None | None | None | None | None | None | None | None | Access DB console, view cluster details |
12-
| `Folder Admin` | Assign roles to folders | None | None | None | None | None | None | Create / delete / manage folders | None |
12+
| `Folder Admin` | Apply roles at the folder scope | None | None | None | None | None | None | Create / delete / manage folders | None |
1313
| `Folder Mover` | None | None | Move cluster between folders | None | None | None | None | None | None |
1414

1515
Some roles can be assigned to users at specific levels of scope to provide more granular permission control:
1616

1717
| **Scope level** | **Description** | **Applicable roles** |
1818
|---|---|---|
19-
| `Organization` | Applies to the entire CockroachDB {{ site.data.products.cloud }} organization, including all clusters and folders | `Cluster Admin`, `Cluster Creator`, `Billing Coordinator`, `Organization Admin`, `Folder Admin`, `Folder Mover` |
20-
| `Folder` | Applies to clusters within a specific folder. Only available as a selectable scope if folders have been created within the organization by a user with the `Folder Admin` role | `Cluster Creator`, `Cluster Admin`, `Folder Admin`, `Folder Mover` |
21-
| `Cluster` | Applies to a specific cluster | `Cluster Admin`, `Cluster Operator`, `Cluster Developer` |
19+
| `Organization` | Applies to the entire CockroachDB {{ site.data.products.cloud }} organization, including all clusters and folders | `Cluster Operator`, `Cluster Admin`, `Cluster Creator`, `Cluster Developer`, `Billing Coordinator`, `Organization Admin`, `Folder Admin`, `Folder Mover` |
20+
| `Folder` | Applies to clusters within a specific folder. Only available as a selectable scope if folders have been created within the organization by a user with the `Folder Admin` role | `Cluster Operator`, `Cluster Admin`, `Cluster Creator`, `Cluster Developer`, `Folder Admin`, `Folder Mover` |
21+
| `Cluster` | Applies to a specific cluster | `Cluster Operator`, `Cluster Admin`, `Cluster Developer` |
2222

2323
{% if page.name != 'authorization.md' %}For more information on these roles and the specific permissions given, see [Organization user roles]({% link cockroachcloud/authorization.md %}#organization-member).{% endif %}

0 commit comments

Comments
 (0)