Members
Register tenant members, grant and change roles, and the permissions of each role
Required permission: SettingsADMIN
On the Members screen you manage who is in this tenant and with which role. The list shows only the members of the current tenant, and changes made here happen only inside the current tenant. Suspending or deleting the account itself is done on the global administrator's Users screen.
Roles and permissions
Each member has one role inside the tenant. A role is a bundle of the permissions below.
| Permission | What it allows | VIEWER | DEVELOPER | OPERATOR | APPROVER | ADMIN |
|---|---|---|---|---|---|---|
View view | See every screen read-only | O | O | O | O | O |
Develop develop | Create training runs, log and stop Runs, and issue MLflow tokens | O | O | O | ||
Register model model_register | Register Run results as a new version in the model registry | O | O | O | ||
Promote to Staging staging_promote | Move a model version up to Staging | O | O | O | ||
Write datasets dataset_write | Create datasets and upload or delete files | O | O | O | ||
Deploy deploy | Deploy and serve models, and build serving images | O | O | |||
Operate operate | Operational actions such as acknowledging and resolving alerts, running and stopping pipelines, and deleting training runs | O | O | |||
Promote to Production production_promote | Move a model version straight to Production. Without it, a promotion becomes an approval request | O | O | |||
Approve approve | Approve or reject promotion requests | O | O | |||
Roll back rollback | Roll a deployment back to a previous version | O | ||||
Settings settings | Manage members, tokens and tenant settings in the admin console | O |
- APPROVER has no develop permission. This separates the person who builds from the person who approves.
- Global administrator is set separately from the roles in this table. A global administrator acts like an ADMIN in any tenant, but if they have a direct membership in that tenant, the direct role takes precedence. A global administrator without a direct membership does not appear in this list.
- The Permission matrix (권한 매트릭스) button on the screen shows the same table, read from the server.
Register a member
- Press Register user (사용자 등록).
- For someone without an account, set the email, password (8 characters or more) and role under Create new account (새 계정 만들기). For someone who already has an account in another tenant, choose Grant role to existing account (기존 계정에 역할 부여). The tenant is fixed to the current tenant.
Register member (admin console) — tenant fixed to the current one - Press Register (등록) (or Grant role (역할 부여)), and pass the password you set to the person by a safe method.
Change roles and remove members
- Press a person in the list to open the Member details (멤버 정보) dialog.
- Change the role in the role select box. Demoting an ADMIN asks for confirmation once more.
- To remove the person from the tenant, press the trash icon on the membership line. The account stays; only the membership in this tenant is removed.
Member details (admin console) — change role or remove membership in this tenant