Roles and permissions
Nebula offers full Identity and Access Management through the Nebula Console. This gives you control over who can access your resources, and what actions they can perform. The Console's Access manager serves as the central hub for managing user identities, authentication, and authorization across your entire infrastructure. The Console enables you to:
- Select appropriate user roles for every user in your organization, with granular permission levels for accessing and managing your resources.
- Audit user activity through detailed logging about every user action on every resource.
All team members that you invite receive a user role with a set of permissions. These permissions define how members of your team can manage user access, handle projects and resources, manage costs and billing, and access activity logs or reports.
The available roles are:
- Owner
- Admin
- Project Lead
- Developer
- Finance Manager
- Viewer
Unsure about which roles would be useful for your team?
Separating Admin and Developer roles is typically enough for teams that use a flat organization structure. All other roles are available for use cases when you need more fine-grained control over permissions, for example with larger or distributed teams.
Get in touch with our Support team if you need more details!
Open this toggle to view a detailed matrix of permissions tied to each available user role.
Owner | Admin | Project Lead | Developer | Finance Manager | Viewer | |
---|---|---|---|---|---|---|
Access Management | ||||||
View access manager | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
View member | ✅ | ✅ | ✅ | ❌ | ❌ | ✅ |
Invite member | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
Assign roles and permissions | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ |
Delete member | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Resource Management | ||||||
Create Resource | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
View Resources | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Edit Resource | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
Delete Resource | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ |
Project Management | ||||||
Create projects | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
View projects | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Edit project | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
Invite member to project | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
Remove member from project | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
Delete project | ✅ | ✅ | ✅ | ❌ | ❌ | ❌ |
Billing and Cost | ||||||
View Billing Information | ✅ | ✅ | ✅ | ❌ | ✅ | ❌ |
Edit Billing Information | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
View Cost summary | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
Delete Billing Information | ✅ | ✅ | ❌ | ❌ | ✅ | ❌ |
Organization Settings | ||||||
View settings | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Update settings | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ |
Monitoring and Reports | ||||||
View activity logs | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Download activity logs | ✅ | ✅ | ✅ | ✅ | ✅ | ❌ |
Delete activity logs | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
Manage API keys | ||||||
Renew API key in a project | ✅ | ✅ | ❌ | ✅ | ❌ | ❌ |
Need help?
If you get stuck or run into anything unclear during your onboarding process, we recommend that you check out the Frequently asked questions page.
If you cannot find what you're looking for, get in touch with our Support team! We are here to help, and welcome any feedback you might have about the onboarding process.