- Organizations and Projects >
- Ops Manager Roles
Ops Manager Roles¶
On this page
Overview¶
Ops Manager roles allow you to grant users different levels of access to Ops Manager. You can grant a user the privileges needed to perform a specific set of tasks and no more.
If you use LDAP authentication for Ops Manager, you must create LDAP groups for each available role described below then assign users to LDAP groups. There is no round trip synchronization between your LDAP server and Ops Manager.
To assign user roles, see Edit Project Role for a User/Team. You cannot assign your own roles.
Organization Roles¶
Organization Role | Description |
---|---|
|
Grants root access to the organization, including:
|
|
Grants the following access:
|
|
Grants the following access:
|
|
Provides read-only access to everything in the organization, including all projects in the organization. For an |
|
Provides read-only access to the organization (settings, users, and billing) and the projects to which they belong. For an |
Project Roles¶
The following roles grant privileges within a project.
Project Role | Description |
---|---|
|
Grants read-only access to the most aspects of the project, including: all activity, operational data, users, and user roles. The user, however, cannot modify or delete anything. |
|
Provides privileges to the following actions:
|
|
Provides privileges to the following:
|
|
Grants the following access:
|
|
Grants the following access:
|
|
Grants the following access:
|
|
Grants the following access:
Note A user with |
Global Roles¶
Global roles have all the same privileges as the equivalent Organization and Project roles, except that they have these privileges for all projects and organizations. They also have some additional privileges as noted below.
The following roles grant privileges for all projects and organizations.
Global Role | Description |
---|---|
|
Grants
|
|
Grants
|
|
Grants
|
|
Grants
|
|
Grants Project Automation Admin access
to all projects. The role additionally grants access to view
system statistics through the admin UI. |
|
Grants privileges that includes all roles combined. |