Skip to main content
Every member of an Organization is assigned one of four roles. Roles control access to org management actions — there is no owner role. Admin is the highest level.

​
Role overview

​
Role descriptions

Admin — Full organization management plus all dev permissions. Admins can invite and remove members, create and manage groups, configure SSO and access settings, manage the IP allowlist, and create or manage any computing resource. Billing — Can create, update, and delete cost center labels for resource attribution. Cannot create or manage computing resources, and cannot manage members or groups. Dev — Can create and manage computing resources: Pods, serverless endpoints, network volumes, clusters, and templates. Cannot manage members, groups, or billing configuration. Basic — Can access and use existing org resources. Cannot create new resources.

​
Resource access in MVP

In the current release, roles gate org-management actions only. All org members — regardless of role — can list, use, modify, and stop any org-owned resource. Resource-level access control (RBAC) is planned for H2 2026.

​
Assigning roles

Only org admins can assign or change member roles. To update a member’s role:
  1. Go to Settings → Members in the console.
  2. Find the member and click the role dropdown next to their name.
  3. Select the new role and confirm. Role changes take effect immediately.