Members
Register tenant members, grant and change roles, and the permissions of each role
Required permission: SettingsADMIN
On the Members screen you manage who is in this tenant and with which role. The list and every change are scoped to the current tenant. You suspend or delete the account itself on the global administrator's Users screen.
Roles and permissions
Each member has one role inside the tenant. A role is a bundle of the permissions below.
| Permission | What it allows | VIEWER | DEVELOPER | OPERATOR | APPROVER | ADMIN |
|---|---|---|---|---|---|---|
View view | See every screen read-only | O | O | O | O | O |
Develop develop | Create training runs, log and stop Runs, and issue MLflow tokens | O | O | O | ||
Register model model_register | Register Run results as a new version in the model registry | O | O | O | ||
Promote to Staging staging_promote | Move a model version between stages such as Staging and Archived | O | O | O | ||
Write datasets dataset_write | Create datasets and upload or delete files | O | O | O | ||
Deploy deploy | Deploy and serve models, and build serving images | O | O | |||
Operate operate | Operational actions such as acknowledging and resolving alerts, running and stopping pipelines, and deleting training runs | O | O | |||
Promote to Production production_promote | Request promotion to Production (it takes effect after approval). Taking a live Production version down also needs this permission | O | O | |||
Approve approve | Approve or reject promotion requests | O | O | |||
Roll back rollback | Record a deployment as rolled back (devices then pull the previous version again; see Roll back a deployment) | O | ||||
Settings settings | Manage members, tokens and tenant settings in the admin console | O |
- APPROVER has no develop permission. This separates the person who builds from the person who approves.
- Global administrator is set separately from the roles in this table. A global administrator acts as an ADMIN in any tenant, but if they have a direct membership in that tenant, the direct role takes precedence. A global administrator without a direct membership does not appear in this list.
- Promotion to Production always goes through an approval request, even with the permission. Models tagged
geo.safety_criticalneed two approvals. Unlike theproduction_promotedescription in the on-screen permission matrix ("without this permission, a promotion becomes an approval request"), a role without the permission cannot create a promotion request at all. - The Permission matrix (권한 매트릭스) button on the screen shows which permissions each role has, read from the server.
Register a member
- Press Register user (사용자 등록).
- For someone without an account, set the email, password (8 characters or more) and role under Create new account (새 계정 만들기). For someone who already has an account in another tenant, choose Grant role to existing account (기존 계정에 역할 부여). The tenant is fixed to the current tenant.
Register member (admin console) — tenant fixed to the current one - Press Register (등록) (or Grant role (역할 부여)), and pass the password you set to the person by a safe method.
If you try to create a new account with an email that already exists, the dialog switches to Grant role to existing account (기존 계정에 역할 부여). Check the role and press once more.
Change roles and remove members
- Press a person in the list to open the Member details (멤버 정보) dialog.
- Change the role in the role select box. Demoting an ADMIN requires one more confirmation.
- To remove the person from the tenant, press the trash icon on the membership line and then Remove (제거) in the confirmation dialog. The account stays; only the membership in this tenant is removed.
Member details (admin console) — change role or remove membership in this tenant