Skip to main content

Roles in SPIRL

SPIRL uses roles to manage permissions. The following access roles are installed by default:

  1. Auditor
  2. Operator
  3. Administrator
  4. Owner

Roles are hierarchial. In general, each subsequent role has the permissions of the previous role plus some additional permissions. For example, Operator has Auditor permissions and the ability to create and modify clusters.

The following table illustrates permissions allowed by each role:

AuditorOperatorManagerAdministratorOwner
Invite user

Yes

Change user role

Yes

Delete user

Yes

Create trust domain

Yes

Yes

Delete trust domain

Yes

Yes

List trust domains

Yes

Yes

Yes

Yes

Yes

Add cluster

Yes

Yes

Yes

Yes

Disable cluster

Yes

Yes

Yes

Yes

Delete cluster

Yes

Yes

Yes

Yes

List clusters

Yes

Yes

Yes

Yes

Yes

Create trust domain deployment

Yes

Yes

Yes

Delete trust domain deployment

Yes

Yes

Yes

List trust domain deployments

Yes

Yes

Yes

Yes

Yes

Create service account

Yes

Yes

List service accounts

Yes

Yes

Yes

Yes

Yes

Delete service account: 1

Yes

Yes

Create CI/CD profile

Yes

Yes

Yes

Yes

Delete CI/CD profile

Yes

Yes

Yes

Yes

List CI/CD profiles

Yes

Yes

Yes

Yes

Yes

Footnotes​

  1. Service accounts can be deleted by their owner, or by an administrator. ↩