Roles and permissions

Nebula offers full Identity and Access Management through the Nebula Console. This gives you control over who can access your resources, and what actions they can perform. The Console's Access manager serves as the central hub for managing user identities, authentication, and authorization across your entire infrastructure. The Console enables you to:

  • Select appropriate user roles for every user in your organization, with granular permission levels for accessing and managing your resources.
  • Audit user activity through detailed logging about every user action on every resource.

All team members that you invite receive a user role with a set of permissions. These permissions define how members of your team can manage user access, handle projects and resources, manage costs and billing, and access activity logs or reports.

The available roles are:

  • Owner
  • Admin
  • Project Lead
  • Developer
  • Finance Manager
  • Viewer

Unsure about which roles would be useful for your team?

Separating Admin and Developer roles is typically enough for teams that use a flat organization structure. All other roles are available for use cases when you need more fine-grained control over permissions, for example with larger or distributed teams.

Get in touch with our Support team if you need more details!

Open this toggle to view a detailed matrix of permissions tied to each available user role.

OwnerAdminProject LeadDeveloperFinance ManagerViewer
Access Management
View access manager
View member
Invite member
Assign roles and permissions
Delete member
Resource Management
Create Resource
View Resources
Edit Resource
Delete Resource
Project Management
Create projects
View projects
Edit project
Invite member to project
Remove member from project
Delete project
Billing and Cost
View Billing Information
Edit Billing Information
View Cost summary
Delete Billing Information
Organization Settings
View settings
Update settings
Monitoring and Reports
View activity logs
Download activity logs
Delete activity logs
Manage API keys
Renew API key in a project


Need help?

If you get stuck or run into anything unclear during your onboarding process, we recommend that you check out the Frequently asked questions page.

If you cannot find what you're looking for, get in touch with our Support team! We are here to help, and welcome any feedback you might have about the onboarding process.