User roles overview#
Roles are configured separately for workspaces and projects.
Roles in a workspace#
Workspace roles are admin and member.
Summary of workspace permissions:
| Permission | Admin | Member |
|---|---|---|
| Managing subscription (including invoice data) | yes | no |
| Managing workspace members | yes | no |
| Creating projects | yes | yes |
| Deleting projects | yes | no |
| Disabling creation of public projects | yes | no |
An admin of a workspace is also the owner of all projects and can grant ownership to anyone in the workspace.
Tip
You can access workspace settings by clicking the workspace name in the top-left corner.
Roles in a project#
You can assign workspace members to projects with different levels of access: owner, contributor, or viewer.
| Permission | Owner | Contributor | Viewer |
|---|---|---|---|
| Viewing project content | yes | yes | yes |
| Editing project content | yes | yes | no |
| Viewing project members | yes | yes | yes |
| Editing project members | yes | no | no |
| Viewing or editing project settings and properties | yes | no | no |
Project contributors have broad content permissions, such as logging runs, creating notebooks, and modifying or deleting previously stored data.
Permissions related to membership is restricted to owners and admins. Note that project owners can grant project ownership to anyone in the workspace and also remove other owners.
Service account permissions#
Service accounts can do logging and management through the Neptune API.
Service accounts can not use the following functions:
Otherwise, service accounts can perform project actions according to their permissions.