CloudReady supports Role Based Administration and Control within your Organization. When you invite a user to join your CloudReady deployment you can assign them a role. You can also create SAML configurations that specifically place a user within a Role.
A role determines the level of access a user has to a set of resources. It can allow different levels for different resource types, for example only allowing view rights to sensors but create and delete for alarms.
The set of resources that the role applies to is either everything in the organization (for an Org Role) or a configurable subset of resources which make up a Team (for a Team Role). You can think of an Organization as a predefined Team that includes all resources and all users.
Roles have specifically defined permissions within CloudReady. Here are the current roles within CloudReady:
Does not grant access to anything, but members can subsequently be given permissions to specific resources via teams. Any users that are just members of the Organization and aren’t placed in a team won’t be able to see any sensors or do anything within CloudReady.
Can only view sensors and alarms but can’t make adjustments. Viewers will be able to build their own Dashboards and Layouts but won’t be able to control anything.
Viewer rights + ability to create and edit alarms and alarm recipient groups. Operators will be able to adjust alarms, disable removed them.
Deployers get the same rights as an Operator but also have the ability to deploy additional sensors, edit or add sites and edit or add sensors.
Can do anything within CloudReady, including inviting additional users and teams, except billing and payments. Of course, administrators cannot give more rights to a user than they have.
Can only manage billing and payments.
The Owner role is special within the Organization (Tenant) and anyone that signs up for a new CloudReady becomes an owner of their Organization. An owner can do anything, including adjusting the billing and payment records within the system. We recommend that when prospects convert to paying customers that they keep at least two Owners within an Organization to ensure that they have access.