User authorization and roles
Deeploy offers various levels of user authorization. The tables in this article detail the actions available to each role at different authorization levels.
Invite users
Organization admins can invite new users on the Organization page.
When inviting new users, you will be required to provide the following details, which can be modified at a later stage:
- Email address: the invitation will be sent to this address
- First name: user's first name
- Last name: user's last name
- Role: user, governance manager or admin
Organization
When invited to join an organization, a user is assigned an 'Admin', 'Governance manager' or 'User' role. The user that created the organization is an admin by default. Each organization must have at least one admin.
| Admin | Governance manager | User | |
|---|---|---|---|
| View organization logs | ✓ | ✓ | |
| Manage control frameworks | ✓ | ✓ | |
| Manage controls | ✓ | ✓ | |
| Manage approval rules | ✓ | ✓ | |
| Manage periodic reviews | ✓ | ✓ | |
| Upload documents | ✓ | ✓ | |
| Change organization name | ✓ | ||
| Invite users | ✓ | ||
| Manage users | ✓ | ||
| Delete organization | ✓ | ||
| Change organization plan | ✓ | ||
| Configure integrations | ✓ | ||
| Create Workspaces | ✓ |
Workspace
Organization admins automatically inherit the Workspace owner role in every Workspace. A Workspace owner can add invite users in the organization to become members of the Workspace, and assign them the 'Operator', 'Reviewer' or 'Owner' role. Governance managers inherit the Workspace reviewer role in every workspace, which unlike admins can be changed to Workspace operator or Workspace owner.
To add a user to a Workspace, you must first invite them to join the organization.
| Workspace owner | Workspace operator | Workspace reviewer | |
|---|---|---|---|
| Manage Workspace members | ✓ | ||
| Edit Workspace settings | ✓ | ||
| Delete the Workspace | ✓ | ||
| Change Deployment owner | ✓ | ||
| Change default Deployment service | ✓ | ||
| Add alert webhooks | ✓ | ✓ | |
| Create Deployments | ✓ | ✓ | |
| Manage Repositories | ✓ | ✓ | |
| Restore Deployments | ✓ | ✓ | |
| Manage use cases | ✓ | ✓ | |
| Manage credentials | ✓ | ✓ | |
| Bulk onboard Databricks serving endpoints | ✓ | ✓ | |
| Manage guardrails | ✓ | ✓ | |
| Manage environment variables | ✓ | ✓ | |
| Manage job schedules | ✓ | ✓ | |
| Manage documentation templates | ✓ | ✓ | ✓ |
| View the Workspace | ✓ | ✓ | ✓ |
| Test Deployments | ✓ | ✓ | ✓ |
| Edit Deployment documentation | ✓ | ✓ | ✓ |
Deployment
Every Deployment has a single owner. By default, this is the user that creates the Deployment. Having a single owner for a Deployment ensures clear responsibility and accountability. To change the Deployment owner, head to the Details page, select a different owner, and click Save.
Workspace owners can change the owner of any Deployment in their Workspace.
| Deployment owner | Other | |
|---|---|---|
| Edit Deployment details | ✓ | |
| Change Deployment owner | ✓ | |
| Update Deployments | ✓ | |
| Delete Deployments | ✓ | |
| Restore Deployments | ✓ | |
| Manage Deployment tokens | ✓ | |
| Manage Deployment alert rules | ✓ | |
| View Deployment events | ✓ | |
| Test a Deployment (predict + explain) | ✓ | ✓ |
| Test a Deployment (actual + evaluation) | ✓ |