Available roles
Currently, Identity and Access in Cloud Manager is natively enabled for Linodes, Cloud Firewall, Nodebalancer, Volume, Image, and VPC. To learn about the experience for non-natively enabled services, see Identity and Access for non-natively enabled services.
Use this list to review what role you want to assign to you or a user of you account. If you need a specific role assigned but don't have access required to update your own role assignment, contact your local account administrator.
Account
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_admin | Account access | accept_service_transfer,acknowledge_account_agreement,answer_profile_security_questions,apply_linode_firewalls,attach_volume,boot_linode,cancel_account,cancel_linode_backups,cancel_service_transfer,clone_linode,clone_linode_disk,clone_volume,create_firewall,create_firewall_device,create_idp_config,create_idp_config_cert,create_image,create_linode,create_linode_backup_snapshot,create_linode_config_profile,create_linode_config_profile_interface,create_linode_disk,create_lock,create_nodebalancer,create_nodebalancer_config,create_nodebalancer_config_node,create_oauth_client,create_payment_method,create_profile_pat,create_profile_ssh_key,create_profile_tfa_secret,create_promo_code,create_service_transfer,create_user,create_volume,create_vpc,create_vpc_subnet,delete_firewall,delete_firewall_device,delete_idp_config,delete_idp_config_cert,delete_image,delete_linode,delete_linode_config_profile,delete_linode_config_profile_interface,delete_linode_disk,delete_lock,delete_nodebalancer,delete_nodebalancer_config,delete_nodebalancer_config_node,delete_oauth_client,delete_payment_method,delete_profile_pat,delete_profile_phone_number,delete_profile_ssh_key,delete_user,delete_volume,delete_vpc,delete_vpc_subnet,detach_volume,disable_profile_tfa,enable_linode_backups,enable_managed,enable_profile_tfa,enroll_beta_program,generate_linode_lish_token,generate_linode_lish_token_remote,is_account_admin,list_account_agreements,list_account_logins,list_all_child_accounts,list_available_services,list_billing_invoices,list_billing_payments,list_default_firewalls,list_delegate_users,list_enrolled_beta_programs,list_entities,list_events,list_firewall_devices,list_firewall_rule_versions,list_firewall_rules,list_idp_configs,list_invoice_items,list_invoice_summary,list_linode_firewalls,list_linode_nodebalancers,list_linode_volumes,list_locks,list_maintenances,list_nodebalancer_config_nodes,list_nodebalancer_firewalls,list_nodebalancer_vpc_configs,list_notifications,list_oauth_clients,list_payment_methods,list_profile_apps,list_profile_devices,list_profile_grants,list_profile_logins,list_profile_pats,list_profile_security_questions,list_profile_ssh_keys,list_role_permissions,list_service_transfers,list_user_delegate_accounts,list_user_grants,list_user_permissions,list_vpc_ip_addresses,list_vpcs_ip_addresses,make_billing_payment,mark_event_seen,migrate_linode,password_reset_linode,reboot_linode,rebuild_linode,rebuild_nodebalancer_config,reorder_linode_config_profile_interfaces,replicate_image,rescue_linode,reset_linode_disk_root_password,reset_oauth_client_secret,resize_linode,resize_linode_disk,resize_volume,restore_linode_backup,revoke_profile_app,revoke_profile_device,send_profile_phone_number_verification_code,set_default_payment_method,shutdown_linode,update_account,update_account_settings,update_default_delegate_access,update_default_firewalls,update_delegate_users,update_firewall,update_firewall_rules,update_idp_config,update_idp_config_user_excludes,update_idp_config_user_includes,update_image,update_linode,update_linode_config_profile,update_linode_config_profile_interface,update_linode_disk,update_linode_firewalls,update_nodebalancer,update_nodebalancer_config,update_nodebalancer_config_node,update_nodebalancer_firewalls,update_oauth_client,update_oauth_client_thumbnail,update_profile,update_profile_pat,update_profile_ssh_key,update_user,update_user_grants,update_user_permissions,update_user_preferences,update_volume,update_vpc,update_vpc_subnet,upgrade_linode,upload_image,verify_profile_phone_number,view_account,view_account_login,view_account_settings,view_billing_invoice,view_billing_payment,view_default_delegate_access,view_enrolled_beta_program,view_event,view_firewall,view_firewall_device,view_firewall_rule_version,view_idp_config,view_idp_config_certs,view_idp_config_user_excludes,view_idp_config_user_includes,view_image,view_invoice_item,view_linode,view_linode_backup,view_linode_config_profile,view_linode_config_profile_interface,view_linode_disk,view_linode_monthly_network_transfer_stats,view_linode_monthly_stats,view_linode_network_transfer,view_linode_stats,view_lock,view_network_usage,view_nodebalancer,view_nodebalancer_config,view_nodebalancer_config_node,view_nodebalancer_statistics,view_nodebalancer_vpc_config,view_oauth_client,view_payment_client_token,view_payment_method,view_profile,view_profile_app,view_profile_device,view_profile_login,view_profile_pat,view_profile_security_question,view_profile_ssh_key,view_region_available_service,view_service_transfer,view_user,view_user_preferences,view_volume,view_vpc,view_vpc_subnet | Allows the user to list, view, create, update, and delete all entities in the account. |
account_viewer | list_account_agreements,list_account_logins,list_available_services,list_billing_invoices,list_billing_payments,list_default_firewalls,list_enrolled_beta_programs,list_entities,list_events,list_firewall_devices,list_firewall_rule_versions,list_firewall_rules,list_idp_configs,list_invoice_items,list_invoice_summary,list_linode_firewallslist_linode_nodebalancers,list_linode_volumes,list_locks,list_maintenances,list_nodebalancer_config_nodes,list_nodebalancer_firewalls,list_nodebalancer_vpc_configs,list_notifications,list_oauth_clients,list_payment_methods,list_profile_apps,list_profile_devices,list_profile_grants,list_profile_logins,list_profile_pats,list_profile_security_questions,list_profile_ssh_keys,list_role_permissions,list_service_transfers,list_user_grants,list_user_permissions,list_volume_quotas,list_vpc_ip_addresses,list_vpcs_ip_addresses,mark_event_seen,view_account,view_account_login,view_account_settings,view_billing_invoice,view_billing_payment,view_enrolled_beta_program,view_event,view_firewall,view_firewall_device,view_firewall_rule_version,view_idp_config,view_idp_config_certs,view_idp_config_user_excludes,view_idp_config_user_includes,view_image,view_invoice_item,view_linode,view_linode_backup,view_linode_config_profile,view_linode_config_profile_interface,view_linode_disk,view_linode_monthly_network_transfer_stats,view_linode_monthly_stats,view_linode_network_transfer,view_linode_stats,view_lock,view_network_usage,view_nodebalancer,view_nodebalancer_config,view_nodebalancer_config_node,view_nodebalancer_statistics,view_nodebalancer_vpc_config,view_oauth_client,view_payment_method,view_profile,view_profile_app,view_profile_device,view_profile_login,view_profile_pat,view_profile_security_question,view_profile_ssh_key,view_region_available_service,view_service_transfer,view_user,view_user_preferences,view_volume,view_volume_quota,view_volume_quota_usage,view_vpc,view_vpc_subnet | Allows the user to list and view all entities in the account. | |
account_billing_admin | Account access | list_billing_invoices,view_invoice_item,make_billing_payment,view_payment_client_token,create_promo_code,list_payment_methods,list_invoice_items,create_payment_method,delete_payment_method,list_billing_payments,view_billing_invoice,view_payment_method,view_billing_payment,set_default_payment_method,view_account,list_account_agreements,acknowledge_account_agreement,update_account,list_invoice_summary | Allows the user to list and view all payments, invoices, and payment methods in the account, as well as make payments, create promo codes, and create, update, and delete payment methods. |
account_billing_viewer | Account access | list_billing_invoices,list_billing_payments,view_invoice_item,view_billing_invoice,view_payment_method,view_billing_payment,list_payment_methods,list_invoice_itemsview_account,list_account_agreements,list_invoice_summary | Allows the user to list and view all payments, invoices, and payment methods in the account. |
account_event_viewer | Account access | list_events,view_event,mark_event_seen | Allows the user to list and view all events in the account. |
account_notification_viewer | Account access | list_notifications | Allows the user to list notifications in the account. |
account_maintenance_viewer | Account access | list_maintenances | Allows the user to list maintenances in the account. |
account_oauth_client_admin | Account access | list_oauth_clients,update_oauth_client,update_oauth_client_thumbnail,reset_oauth_client_secret,create_oauth_client,view_oauth_client,delete_oauth_client | Allows the user to create, list, view, update, and delete all OAuth client configurations in the account. |
account_oauth_client_viewer | Account access | list_oauth_clients,view_oauth_client | Allows the user to list and view all OAuth client configurations in the account. |
account_idp_admin | Account access | view_idp_config_user_includes,update_idp_config,update_idp_config_user_excludes,list_idp_configs,view_idp_config_user_excludes,update_idp_config_user_includes,create_idp_config_cert,view_idp_config_certs,view_idp_config,delete_idp_config,delete_idp_config_cert,create_idp_config | Allows the user to create, view, update and delete the identity provider configuration in the account. It also allows adding a new certificate to the existing IDP configuration |
account_idp_viewer | Account access | view_idp_config_user_includes,list_idp_configs,view_idp_config_user_excludes,view_idp_config_certs,view_idp_config | Allows the user to view the identity provider configuration in the account. |
Linode
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_linode_creator | Account access | create_linode | Allows the user to create Linodes in the account. |
linode_admin | Entity access | generate_linode_lish_token_remote,rebuild_linode,shutdown_linode,restore_linode_backup,update_linode_config_profile_interface,create_linode_config_profile,rescue_linode,delete_linode_config_profile,list_linode_volumes,list_linode_nodebalancers,view_linode_monthly_stats,view_linode_config_profile,delete_linode_disk,delete_linode,clone_linode,create_linode_config_profile_interface,password_reset_linode,view_linode_config_profile_interface,reset_linode_disk_root_password,upgrade_linode,resize_linode,update_linode_firewalls,create_linode_backup_snapshot,list_linode_firewalls,boot_linode,view_linode_disk,clone_linode_disk,view_linode_monthly_network_transfer_stats,enable_linode_backups,update_linode,view_linode_network_transfer,apply_linode_firewalls,reorder_linode_config_profile_interfaces,reboot_linode,create_linode_disk,view_linode_stats,update_linode_config_profile,view_linode_backup,delete_linode_config_profile_interface,migrate_linode,generate_linode_lish_token,view_linode,resize_linode_disk,update_linode_disk,cancel_linode_backups | Allows the user to view, update, and delete Linode instances attached to this role, as well as create, list, view, update, and delete their backups, config profiles, and disks. |
linode_contributor | Enitity access | generate_linode_lish_token_remote,rebuild_linode,shutdown_linode,restore_linode_backup,update_linode_config_profile_interface,create_linode_config_profile,rescue_linode,list_linode_volumes,list_linode_nodebalancers,view_linode_monthly_stats,view_linode_config_profile,clone_linode,create_linode_config_profile_interface,password_reset_linode,view_linode_config_profile_interface,reset_linode_disk_root_password,upgrade_linode,resize_linode,update_linode_firewalls,create_linode_backup_snapshot,list_linode_firewalls,boot_linode,view_linode_disk,clone_linode_disk,view_linode_monthly_network_transfer_stats,enable_linode_backups,update_linode,view_linode_network_transfer,apply_linode_firewalls,reorder_linode_config_profile_interfaces,reboot_linode,create_linode_disk,view_linode_stats,update_linode_config_profile,view_linode_backup,migrate_linode,generate_linode_lish_token,view_linode,resize_linode_disk,update_linode_disk,delete_linode_disk,delete_linode_config_profile_interface | Allows the user to view and update Linode instances attached to this role, as well as create, list, view, and update their backups, config profiles, and disks. |
linode_viewer | Entity access | list_linode_firewalls,list_linode_volumes,view_linode_disk,view_linode,view_linode_monthly_network_transfer_stats,view_linode_network_transfer,list_linode_nodebalancers,view_linode_monthly_stats,view_linode_config_profile,view_linode_stats,view_linode_backup,view_linode_config_profile_interface | Allows the user to view Linode instances attached to this role and their backups, config profiles, and disks. |
Firewall
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_firewall_creator | Account access | create_firewall | Allows the user to create firewalls in the account |
account_firewall_admin | Account access | view_firewall,list_firewall_rules,view_firewall_device,update_firewall,delete_firewall_device,create_firewall,update_firewall_rules,list_firewall_devices,delete_firewall,view_firewall_rule_version,list_firewall_rule_versions,create_firewall_device | Allows the user to list, view, update, and delete all firewall instances in the account. |
firewall_admin | Entity access | view_firewall,list_firewall_rules,view_firewall_device,update_firewall,delete_firewall_device,update_firewall_rules,list_firewall_devices,delete_firewall,view_firewall_rule_version,list_firewall_rule_versions,create_firewall_device | Allows the user to view, update, and delete firewall instances in the account as well as view, create, and delete their devices and rules. |
firewall_viewer | Enitity access | view_firewall,list_firewall_rules,view_firewall_device,list_firewall_devices,view_firewall_rule_version,list_firewall_rule_versions | Allows the user to view firewall instances attached to this role, as well as list and view their devices and rules. |
firewall_contributor | Enitity access | view_firewall,list_firewall_rules,view_firewall_device,update_firewall,update_firewall_rules,list_firewall_devices,view_firewall_rule_version,list_firewall_rule_versions,create_firewall_device | Allows the user to view and update firewall instances attached to this role, as well as view their devices and view and update their rules. |
Nodebalancer
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_nodebalancer_creator | Account access | create_nodebalancer | Allows the user to create NodeBalancers in the account. |
nodebalancer_contributor | Entity access | list_nodebalancer_vpc_configs,update_nodebalancer_config,list_nodebalancer_firewalls,view_nodebalancer,update_nodebalancer_config_node,view_nodebalancer_config_node,create_nodebalancer_config,view_nodebalancer_statistics,view_nodebalancer_config,create_nodebalancer_config_node,list_nodebalancer_config_nodes,update_nodebalancer_firewalls,view_nodebalancer_vpc_config,rebuild_nodebalancer_config,update_nodebalancer,delete_nodebalancer_config_node,delete_nodebalancer_config | Allows the user to view and update NodeBalancer instances attached to this role, as well as create, list, view, and update their configs. |
nodebalancer_admin | Entity access | delete_nodebalancer_config_node,list_nodebalancer_vpc_configs,update_nodebalancer_config,list_nodebalancer_firewalls,view_nodebalancer,update_nodebalancer_config_node,view_nodebalancer_config_node,create_nodebalancer_config,view_nodebalancer_statistics,view_nodebalancer_config,create_nodebalancer_config_node,list_nodebalancer_config_nodes,update_nodebalancer_firewalls,view_nodebalancer_vpc_config,rebuild_nodebalancer_config,delete_nodebalancer,update_nodebalancer,delete_nodebalancer_config | Allows the user to view, update, and delete NodeBalancer instances attached to this role, as well as create, list, view, update, and delete their configs. |
nodebalancer_viewer | Enitity access | view_nodebalancer_config_node,view_nodebalancer_statistics,view_nodebalancer_config,list_nodebalancer_config_nodes,list_nodebalancer_vpc_configs,list_nodebalancer_firewalls,view_nodebalancer_vpc_config,view_nodebalancer | Allows the user to view NodeBalancer instances attached to this role and their configs. |
VPC
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_vpc_creator | Account access | create_vpc | Allows the user to create VPCs in the account. |
account_vpc_admin | Account access | list_vpc_ip_addresses,delete_vpc_subnet,update_vpc,view_vpc,view_vpc_subnet,create_vpc,delete_vpc,list_vpcs_ip_addresses,create_vpc_subnet,update_vpc_subnet | Allows the user to list, view, update, and delete all VPC instances in the account, as well as create, list, view, update, and delete their subnets. |
account_vpc_viewer | Account access | list_vpc_ip_addresses,view_vpc,view_vpc_subnet, list_vpcs_ip_addresses | Allows the user to view all VPC instances in the account. |
vpc_contributor | Entity access | list_vpc_ip_addresses,delete_vpc_subnet,update_vpc,view_vpc,view_vpc_subnet, create_vpc_subnet, update_vpc_subnet | Allows the user to view and update VPC instances attached to this role and their subnets. |
vpc_admin | Entity access | list_vpc_ip_addresses,delete_vpc_subnet,update_vpc,view_vpc,view_vpc_subnet,delete_vpc,create_vpc_subnet,update_vpc_subnet | Allows the user to view, update, and delete VPC instances attached to this role, as well as view, create, update, and delete their subnets. |
vpc_viewer | Enitity access | list_vpc_ip_addresses,view_vpc, view_vpc_subnet | Allows the user to view VPC instances attached to this role and their subnets. |
Volume
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_volume_creator | Account access | create_volume | Allows the user to create volumes in the account. |
account_volume_admin | Account access | attach_volume,clone_volume,create_volume,delete_volume,detach_volume,list_volume_quotas,resize_volume,update_volume,view_volume,view_volume_quota,view_volume_quota_usage | Allows the user to list, view, update, attach, clone, detach, resize, and delete all volume instances, as well as view volume quotas. |
volume_contributor | Account access | attach_volume,clone_volume,detach_volume,view_volume,update_volume,resize_volume, | Allows the user to view, update, attach, clone, detach, and resize volume instances attached to this role. |
volume_admin | Entity access | attach_volume, delete_volume,clone_volume,detach_volume,view_volume,update_volume,resize_volume | Allows the user to view, update, attach, clone, detach, resize, and delete volume instances attached to this role. |
volume_viewer | Enitity access | view_volume | Allows the user to view volume instances attached to this role. |
Image
Image sharingThe image sharing feature is not natively enabled in Identity and Access. We're working on enabling it soon. Currently, to use this feature, assign a user the
account_adminrole.
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_image_creator | Account access | upload_image,create_image | Allows the user to create Images in the account. |
account_image_admin | Account access | upload_image,update_image,replicate_image,delete_image,create_image,view_image | Allows the user to list, view, update, replicate, and delete all Image instances in the account. |
image_contributor | Entity access | update_image, view_image | Allows the user to view, update, attach, clone, detach, and resize Image instances attached to this role. |
image_admin | Entity access | update_image,replicate_image,delete_image,view_image | Allows the user to view, update, replicate, and delete Image instances attached to this role. |
image_viewer | Enitity access | view_image | Allows the user to view Volume instances attached to this role. |
Database
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_database_admin | Account access | view_mysql_database,create_mysql_database,update_mysql_database,delete_mysql_database,patch_mysql_database,resume_mysql_database ,suspend_mysql_database,view_mysql_database_cert,view_mysql_database_credential,reset_mysql_database_credential,view_postgresql_database,create_postgresql_database,update_postgresql_database,delete_postgresql_database,patch_postgresql_database,resume_postgresql_database,suspend_postgresql_database,view_postgresql_database_cert,view_postgresql_database_credentialreset_postgresql_database_credentialview_postgresql_database_connection_poolslist_postgresql_database_connection_poolscreate_postgresql_database_connection_poolsupdate_postgresql_database_connection_poolsdelete_postgresql_database_connection_poolsview_valkey_database,view_valkey_database_cert,view_valkey_database_credential,create_valkey_database,update_valkey_database,delete_valkey_database,reset_valkey_database_credential,suspend_valkey_database,resume_valkey_database,patch_valkey_database | Allows the user to list, view, update, patch, suspend, resume, and delete all database clusters in the account, as well as create new instances, view clusters' SSL certificates, and view and reset their credentials. For PostgreSQL clusters, it also allows the user to view, create, update, and delete clusters' connection pools. |
account_database_viewer | Account access | view_postgresql_database,view_postgresql_database_cert,view_postgresql_database_connection_pools,list_postgresql_database_connection_poolsview_mysql_database,view_mysql_database_cert,view_valkey_database,view_valkey_database_cert | Allows the user to view all database clusters in the account with their SSL certificates, and PostgreSQL connection pools. |
account_database_creator | Account access | create_mysql_database,view_mysql_database,create_postsql_database,view_postsql_database,create_valkey_database,view_valkey_database,patch_valkey_database, | Allows the user to create database clusters in the account. |
account_postgresql_database_admin | Account access | view_postgresql_database,create_postgresql_database,update_postgresql_database,delete_postgresql_database,patch_postgresql_database,resume_postgresql_database,suspend_postgresql_database,view_postgresql_database_cert,view_postgresql_database_credential,reset_postgresql_database_credential,view_postgresql_database_connection_pools,list_postgresql_database_connection_pools,create_postgresql_database_connection_pools,update_postgresql_database_connection_pools,delete_postgresql_database_connection_pools, | Allows the user to create, list, view, update, patch, suspend, resume, and delete PostgreSQL database clusters in the account, as well as view clusters' SSL certificates, view and reset clusters' credentials, and view, create, update, and delete clusters' connection pools. |
account_postgresql_database_creator | Account access | create_postgresql_database,view_postgresql_database,view_postgresql_database_cert,view_postgresql_database_credential,update_postgresql_database,delete_postgresql_database,patch_postgresql_database,resume_postgresql_database,suspend_postgresql_database,reset_postgresql_database_credential,view_postgresql_database_connection_pools,list_postgresql_database_connection_pools,create_postgresql_database_connection_pools,update_postgresql_database_connection_pools,delete_postgresql_database_connection_pools | Allows the user to create PostgreSQL database clusters in the account. |
account_postgresql_database_viewer | Account access | view_postgresql_database,view_postgresql_database_cert,view_postgresql_database_connection_pools,list_postgresql_database_connection_pools, | Allows the user to view PostgreSQL database clusters in the account with their SSL certificates and connection pools. |
account_mysql_database_admin | Account access | view_mysql_database,view_mysql_database,view_mysql_database_cert,view_mysql_database_credential,create_mysql_database,update_mysql_database,delete_mysql_database,patch_mysql_database,resume_mysql_database,suspend_mysql_database,reset_mysql_database_credential, | Allows the user to create, list, view, update, patch, suspend, resume, and delete all MySQL database clusters in the account, as well as view clusters' SSL certificates, and view and reset clusters' credentials. |
account_mysql_database_viewer | Account access | view_mysql_database,view_mysql_database_cert | Allows the user to view MySQL database clusters in the account with their SSL certificates. |
account_mysql_database_creator | Account access | view_mysql_database,view_mysql_database,view_mysql_database_cert,view_mysql_database_credential,create_mysql_database,update_mysql_database,delete_mysql_database,patch_mysql_database,resume_mysql_database,suspend_mysql_database,reset_mysql_database_credential | Allows the user to create MySQL database clusters in the account. |
account_valkey_database_admin | Account access | view_valkey_database,view_valkey_database_cert,view_valkey_database_credential,create_valkey_database,update_valkey_database,delete_valkey_database,reset_valkey_database_credential,suspend_valkey_database,resume_valkey_database,patch_mysql_database | Allows the user to create, list, view, update, patch, suspend, resume, and delete Valkey database clusters in the account, as well as view clusters' SSL certificates, and view and reset clusters' credentials. |
account_valkey_database_viewer | Account access | view_valkey_database,view_valkey_database_cert | Allows the user to view Valkey database clusters in the account with their SSL certificates. |
account_valkey_database_creator | Account access | view_valkey_database,view_valkey_database_cert,view_valkey_database_credential,create_valkey_database,update_valkey_database,delete_valkey_database,reset_valkey_database_credential,suspend_valkey_database,resume_valkey_database | Allows the user to create Valkey database clusters in the account. |
postgresql_database_admin | Entity access | view_postgresql_database,view_postgresql_database_cert,view_postgresql_database_credential,View_postgresql_database_connection_pools,list_postgresql_database_connection_pools,update_postgresql_database,delete_postgresql_database,resume_postgresql_database,suspend_postgresql_database,reset_postgresql_database_credential,create_postgresql_database_connection_pools,update_postgresql_database_connection_pools,delete_postgresql_database_connection_pools,patch_postgresql_database | Allows the user to list, view, update, patch, suspend, resume, and delete PostgreSQL database clusters attached to this role, as well as view clusters' SSL certificates, view and reset clusters' credentials, and create, view, update, and delete PostgreSQL connection pools. |
postgresql_database_viewer | Entity access | view_postgresql_database,view_postgresql_database_cert,view_postgresql_database_connection_pools,list_postgresql_database_connection_pools | Allows the user to view PostgreSQL database clusters attached to this role with their SSL certificates and connection pools. |
postgresql_database_contributor | Entity access | view_postgresql_database,view_postgresql_database_cert,view_postgresql_database_credential,update_postgresql_database,patch_postgresql_database,suspend_postgresql_database,resume_postgresql_database,view_postgresql_database_connection_pools,list_postgresql_database_connection_pools,create_postgresql_database_connection_pools,update_postgresql_database_connection_pools,delete_postgresql_database_connection_pools | Allows the user to view, update, patch, suspend, and resume PostgreSQL database clusters attached to this role, as well as view clusters' SSL certificates and credentials and create, view, update, and delete clusters' connection pools. |
mysql_database_admin | Entity access | view_mysql_database,view_mysql_database,view_mysql_database_cert,view_mysql_database_credentials,reset_mysql_database_credential,update_mysql_database,delete_mysql_database,patch_mysql_database,resume_mysql_database,suspend_mysql_database | Allows the user to list, view, update, patch, suspend, resume, and delete MySQL database clusters attached to this role, as well as view clusters' SSL certificates, and view and reset clusters' credentials. |
mysql_database_viewer | Entity access | view_mysql_database,view_mysql_database_cert | Allows the user to view MySQL database clusters attached to this role with their SSL certificates. |
mysql_database_contributor | Entity access | view_mysql_database,view_mysql_database_cert,view_mysql_database_credential,update_mysql_database,patch_mysql_database,resume_mysql_database,suspend_mysql_database | Allows the user to view, update, patch, suspend, and resume MySQL database clusters attached to this role, as well as view clusters' SSL certificates and credentials. |
valkey_database_admin | Entity access | view_valkey_database,View_valkey_database_cert,view_valkey_database_credential,update_valkey_database,delete_valkey_database,suspend_valkey_database,resume_valkey_database,reset_valkey_database_credential,patch_valkey_database, | Allows the user to list, view, update, patch, suspend, resume, and delete Valkey database clusters attached to this role, as well as view clusters' SSL certificates, and view and reset clusters' credentials. |
valkey_database_viewer | Entity access | view_valkey_database,view_valkey_database_cert | Allows the user to view Valkey database clusters attached to this role with their SSL certificates. |
valkey_database_contributor | Entity access | view_valkey_database,view_valkey_database_cert,view_valkey_database_credential,update_valkey_database,patch_valkey_database,suspend_valkey_database,resume_valkey_database | Allows the user to view, update, patch, suspend, and resume Valkey database clusters attached to this role, as well as view clusters' SSL certificates and credentials. |
LKE clusters
This service is not yet natively-enabled. To learn more about the experience, see Identity and Access for non-natively enabled services.
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_lkecluster_creator | Account access | N/A | Allows the user the same access as the legacy "Can add Kubernetes Clusters to this account ($)" general permission. |
lkecluster_admin | Entity access | N/A | Allows the user the same access as the legacy Read-Write specific permission for the LKE clusters attached to this role. |
lkecluster_viewer | Enitity access | N/A | Allows the user the same access as the legacy Read-Only specific permission for the LKE clusters attached to this role. |
Domain
This service is not yet natively-enabled. To learn more about the experience, see Identity and Access for non-natively enabled services.
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_domain_creator | Account access | N/A | Allows the user the same access as the legacy "Can add Domains using the DNS Manager" general permission. |
domain_admin | Entity access | N/A | Allows the user the same access as the legacy Read-Write specific permission for the Domains attached to this role. |
domain_viewer | Enitity access | N/A | Allows the user the same access as the legacy Read-Only specific permission for the Domains attached to this role. |
StackScripts
This service is not yet natively-enabled. To learn more about the experience, see Identity and Access for non-natively enabled services.
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_stackscript_creator | Account access | N/A | Allows the user the same access as the legacy "Can add Stackscripts under this account" general permission. |
stackscript_admin | Entity access | N/A | Allows the user the same access as the legacy Read-Write specific permission for the StackScripts attached to this role. |
stackscript_viewer | Enitity access | N/A | Allows the user the same access as the legacy Read-Only specific permission for the StackScripts attached to this role. |
Longview
This service is not yet natively-enabled. To learn more about the experience, see Identity and Access for non-natively enabled services.
| Role name | Role type | Included permissions | Role description |
|---|---|---|---|
account_longview_creator | Account access | N/A | Allows the user the same access as the legacy "Can add Longview clients to this account" general permission. |
account_longview_subscription_admin | Account access | N/A | Allows the user the same access as the legacy. "Can modify this account's Longview subscription ($)" general permission. |
longview_admin | Entity access | N/A | Allows the user the same access as the legacy Read-Write specific permission for the Longview clients attached to this role. |
longview_viewer | Enitity access | N/A | Allows the user the same access as the legacy Read-Only specific permission for the Longview clients attached to this role. |
Updated about 8 hours ago
Did this page help you?