Roles and Permissions
Every member can read everything in the workspace. A member’s role decides who they can manage, and their write access decides what they can change.
| Role | Can manage | Limit |
|---|---|---|
| Owner | Everyone, the workspace settings and deleting the workspace | One |
| Admin | Members, and inviting members | Any amount |
| Member | Nobody | Any amount |
You can only manage people below your own role, and only give them a role below yours. An owner manages admins and members. An admin manages members.
Write access
Section titled “Write access”Write access is set per resource kind, such as instances, apps or disks. Each kind is “Read only” or “Read & write”. Pick “All Resources” to give write access to everything.
Registry credentials count as apps. A member needs write access to apps to add or change them.
Changing a member’s role or access
Section titled “Changing a member’s role or access”- Head over to your workspace’s “Access Control” page, under “Security” in the sidebar
- Hit the manage access button on the member’s row
- Change the role or write access
- Hit “Save”
The change applies right away. Pending invites have the same button. Use it to change an invite before it is accepted.
Owner-only settings
Section titled “Owner-only settings”Some settings can only be changed by the workspace owner.
Two-factor authentication
Section titled “Two-factor authentication”Turning this setting ON will require every member in the workspace to have two-factor enabled. People without it cannot accept invites. Every current member needs a two-factor method before you can turn it on.
Require approval for orders
Section titled “Require approval for orders”Turning this setting ON will make orders placed by other members wait for approval from the workspace owner before a charge is created.