User authorization and roles
Deeploy offers various levels of user authorization. The tables in this article detail the actions available to each role at different authorization levels.
Invite users
Organization admins can invite new users on the Organization page.
When inviting new users, you will be required to provide the following details, which can be modified at a later stage:
- Email address: the invitation will be sent to this address
- First name: user's first name
- Last name: user's last name
- Role: user or admin
Organization
When invited to join an organization, a user is assigned an 'Admin' or 'User' role. The user that created the organization is an admin by default.
| Admin | User | |
|---|---|---|
| Invite users | ✓ | |
| Manage users | ✓ | |
| Change organization name | ✓ | |
| Change organization plan | ✓ | |
| Delete organization | ✓ | |
| Create Workspaces | ✓ | |
| Upload documents | ✓ |
Workspace
Organization admins automatically inherit the Workspace owner role in every Workspace. A Workspace owner can add invite users in the organization to become members of the Workspace, and assign them the 'Operator', 'Reviewer' or 'Owner' role.
To add a user to a Workspace, you must first invite them to join the organization.
| Workspace owner | Workspace operator | Workspace reviewer | |
|---|---|---|---|
| Manage Workspace members | ✓ | ||
| Edit Workspace settings | ✓ | ||
| Delete the Workspace | ✓ | ||
| Change Deployment owner | ✓ | ||
| Change default Deployment service | ✓ | ||
| Change Deployment owner | ✓ | ||
| Add alert webhooks | ✓ | ||
| Create Deployments | ✓ | ✓ | |
| Manage Repositories | ✓ | ✓ | |
| Restore Deployments | ✓ | ✓ | |
| Manage use cases | ✓ | ✓ | |
| Manage credentials | ✓ | ✓ | |
| Bulk onboard Databricks serving endpoints | ✓ | ✓ | |
| Manage environment variables | ✓ | ✓ | |
| Manage job schedules | ✓ | ✓ | |
| Manage compliance templates | ✓ | ✓ | |
| View the Workspace | ✓ | ✓ | ✓ |
| Test Deployments | ✓ | ✓ | ✓ |
| Edit compliance insights | ✓ | ✓ | ✓ |
Deployment
Every Deployment has a single owner. By default, this is the user that creates the Deployment. Having a single owner for a Deployment ensures clear responsibility and accountability. To change the Deployment owner, head to the Details page, select a different owner, and click Save.
Workspace owners can change the owner of any Deployment in their Workspace.
| Deployment owner | Other | |
|---|---|---|
| Edit Deployment details | ✓ | |
| Change Deployment owner | ✓ | |
| Update Deployments | ✓ | |
| Delete Deployments | ✓ | |
| Restore Deployments | ✓ | |
| Manage Deployment tokens | ✓ | |
| Manage Deployment alert rules | ✓ | |
| View Deployment events | ✓ | |
| Test a Deployment | ✓ | ✓ |