Roles Comparison
The following table provides a comparison of the predefined Roles (permission sets) in CodeCanvas.
Use this information to determine whether you can use a predefined Role to grant specific permissions to members or teams, or need to edit these Roles or create a new Role with a custom set of permissions.
Global permissions
System Admin role can't be edited, create a custom role instead.
Member role is automatically granted to all organization members and can't be taken away.
– available and enabled by default
– available but disabled by default
No checkbox – not available and can't be enabled
System management
Permission\Role | System Admin | Member |
---|---|---|
Manage global dev environment settings
| ||
Create namespaces Creating new namespaces | ||
Manage infrastructure Managing computing platforms and cloud policies | ||
Manage users and user personal data
| ||
Superadmin
|
Application (legacy)
Permission/Role | System Admin | Member | |
---|---|---|---|
View applications | |||
Delete applications | |||
View applications secrets | |||
Update applications | |||
Create applications |
Namespace-specific permissions
The tables show the default permission configuration for namespace templates. Namespace templates are pre-defined Roles that come standard with every newly created namespace.
As a System Admin you can edit the role templates; however, these changes made globally will only be applied to namespaces created afterward – existing namespaces will not be affected.
Namespace Admin can always override the initial global settings, modifying them for his or her namespace.
– available and enabled by default
– available but disabled by default
No checkbox – not available and can't be enabled
Namespace management
Permission\Role | Namespace Admin |
---|---|
View namespace details Viewing namespace details, such as connected repositories, templates, and other settings | |
Manage all repository connections Managing Git repository connections in the namespace | |
Manage all dev environment templates
| |
Namespace administrator
|