Skip to main content
Version: v2.10.0

Roles

Yeedu separates authorisation into two independent layers. Platform roles govern the installation as a whole and apply across every tenant within it, whereas tenant roles govern what somebody can do inside one particular tenant, and an individual's effective permissions are whatever the two layers grant between them.

There's a third layer below both, applied per workspace. See Access Management for the MANAGE, EDIT, RUN and VIEW permissions operating at that level.

Platform Admin​

Platform-level role. Full access to create and manage tenants and perform all operations across all tenants.

Platform Billing​

Platform-level role. Can view and manage billing information across all tenants.

Tenant Roles

There are 3 levels of access for tenants:

  • Admin
  • Can Manage Cluster
  • User

Admin​

Tenant-level role. Full access to:

  • Create and manage all configurations
  • Assign roles within the tenant
  • Manage clusters
  • Manage workspaces

Can Manage Cluster​

Tenant-level role. Can:

  • Perform all cluster actions (create, start, stop, destroy)
  • Manage workspaces

Can't modify tenant-level configurations or roles.

User​

Tenant-level role. Can:

  • Create workspaces
  • Create notebooks
  • Create and run jobs

Can't manage clusters or modify tenant-level configurations.

Only Platform Admin and Tenant Admin can add, change, or remove roles and access. Administrators can manage those permissions for a group or for an individual user, and we'd recommend the group route wherever your identity provider already maintains the membership, since it keeps the authorisation model in one place instead of duplicating it across individual assignments that drift apart over time.