Roles and permissions

Every user has one of four roles: Admin, Operations, Practitioner, or Stakeholder. Roles are assigned when a user is invited and can be changed later from User Management. For a description of what each role means, see Manage roles.

Most pages in the platform are open to any authenticated member of your organization, regardless of role. A smaller set of administrative pages require a specific permission level on top of your role.

Pages open to every role

These pages have no permission requirement. Any authenticated member of your organization can access them; whether they actually appear in your sidebar still depends on which features are enabled for your organization.

• Dashboard
• Cost Explorer
• Budgets (the reporting view; see below for the settings page that manages budget targets)
• AI Spend
• Resource Inventory
• Tag Analysis
• Commitments
• Recommendations
• Security
• Kubernetes Report
• Saved Reports and Summary Report

Pages that require a specific permission

These pages check for a permission level in addition to a valid login. Today, Admin is the only role with any organization-level permission, so it’s the only role that can reach the Settings pages below; Operations has a separate permission that opens Connections, and Anomalies has its own permission that both Practitioner and Stakeholder hold.

Roles at a glance