Roles and Permissions

Access permissions in Rill Cloud are organized into roles at the project and organization level. In most cases, it should be sufficient to grant access at the organization level because those permissions are inherited for projects by default.

Role inheritance

Some project-level roles can be inherited from the organization-level:

• Users with read_projects permission on an organization get viewer role on all projects in the organization.
• Users with manage_projects permission on an organization get admin role on all projects in the organization.

Organization-level permissions

There are two roles available at the organization-level: Viewer and Admin.

Permission	Description	Viewer	Admin
read_org	View basic info about the organization	✔	✔
manage_org	Change organization settings		✔
read_projects	Act as a viewer on all projects in the organization	✔	✔
create_projects	Create new projects in the organization		✔
manage_projects	Act as an admin on all projects in the organization		✔
read_org_members	View members of the organization		✔
manage_org_members	Add, remove or change roles of organization members		✔

Project-level permissions

There are two roles available at the project-level: Viewer and Admin.

Permission	Description	Viewer	Admin
read_project	View basic info about the project	✔	✔
manage_project	Change project settings		✔
read_prod	View dashboards deployed from the production (main) branch	✔	✔
read_prod_status	View logs for the production deployment		✔
manage_prod	Trigger actions on the production deployment		✔
read_project_members	View members of the project		✔
manage_project_members	Add, remove or change roles of project members		✔
create_magic_auth_tokens	Create shareable URLs		✔
manage_magic_auth_tokens	Remove shareable URLs created by others		✔
create_reports	Create and edit new scheduled reports	✔	✔
manage_reports	Edit and change scheduled reports created by others		✔
create_alerts	Create and edit new alerts	✔	✔
manage_alerts	Edit and change alerts created by others		✔
create_bookmarks	Create and edit new bookmarks	✔	✔
manage_bookmarks	Edit and change bookmarks created by others		✔

User group-level permissions

There are two roles available at the user group-level: Viewer and Admin.

Permission	Description	Viewer	Admin
read_project	View basic info about the project	✔	✔
manage_project	Change project settings		✔
read_prod	View dashboards deployed from the production (main) branch	✔	✔
read_prod_status	View logs for the production deployment		✔
manage_prod	Trigger actions on the production deployment		✔
read_project_members	View members of the project		✔
manage_project_members	Add, remove or change roles of project members		✔
create_magic_auth_tokens	Create shareable URLs		✔
manage_magic_auth_tokens	Remove shareable URLs created by others		✔
create_reports	Create and edit new scheduled reports	✔	✔
manage_reports	Edit and change scheduled reports created by others		✔
create_alerts	Create and edit new alerts	✔	✔
manage_alerts	Edit and change alerts created by others		✔
create_bookmarks	Create and edit new bookmarks	✔	✔
manage_bookmarks	Edit and change bookmarks created by others		✔