User authorization and roles

Deeploy offers various levels of user authorization. The tables below detail the actions available to each role at different authorization levels.

Organization

When invited to join an organization, a user is assigned an 'Admin' or 'User' role. The user that created the organization is an admin by default.

	Admin	User
Invite users	✓
Manage users	✓
Change organization name	✓
Change organization plan	✓
Delete organization	✓
Create Workspaces	✓
Upload documents	✓

Workspace

Organization admins automatically inherit the Workspace owner role in every Workspace. A Workspace owner can add invite users in the organization to become members of the Workspace, and assign them the 'Operator', 'Reviewer' or 'Owner' role.

Caution

To add a user to a Workspace, you must first invite them to join the organization.

	Workspace owner	Workspace operator	Workspace reviewer
Manage Workspace members	✓
Edit Workspace settings	✓
Delete the Workspace	✓
Change Deployment owner	✓
Change default Deployment service	✓
Change Deployment owner	✓
Add alert webhooks	✓
Create Deployments	✓	✓
Manage Repositories	✓	✓
Restore Deployments	✓	✓
Manage use cases	✓	✓
Manage credentials	✓	✓
Bulk onboard Databricks serving endpoints	✓	✓
Manage environment variables	✓	✓
Manage job schedules	✓	✓
Manage compliance templates	✓		✓
View the Workspace	✓	✓	✓
Test Deployments	✓	✓	✓
Edit compliance insights	✓	✓	✓

Deployment

Every Deployment has a single owner. By default, this is the user that creates the Deployment. Having a single owner for a Deployment ensures clear responsibility and accountability. To change the Deployment owner, head to the Details page, select a different owner, and click Save.

Info

Workspace owners can change the owner of any Deployment in their Workspace.

	Deployment owner	Other
Edit Deployment details	✓
Change Deployment owner	✓
Update Deployments	✓
Delete Deployments	✓
Restore Deployments	✓
Manage Deployment tokens	✓
Manage Deployment alert rules	✓
View Deployment events	✓
Test a Deployment	✓	✓