The page has been translated by Gen AI.

Roles

Project group roles and permissions

The project group creator has Owner permission by default.
Master lacks the project group deletion permission among the Owner’s permissions.
Developers and Viewers have view‑only permissions.

Category	Permission	Owner	Master	Developer	Viewer
Project Group	Lookup	○	○	○	○
Project Group	Edit	○	○
Project Group	Delete	○
project	Create	○	○
Project	Lookup	○	○	○	○
Member	Add	○	○
member	Lookup	○	○	○	○
Member	Delete	○	○

Table. Permissions for each role within the project group

Project roles and permissions

They are classified as Owner, Master, Developer, and Viewer.
Viewer can only view.
Developers can create or delete development-related functions.
- Example) build pipeline, Helm chart, deployment
Owner/Master can view, create, and delete all functions within a project.
The project role holder inherits the role holder of the project group.
Even if you are not registered as a project member, you can perform the role in the project if you are a member of the project group.
When a user’s project role and project group role differ, the project role takes precedence.
- In other words, you can restrict permissions for a specific project among the members of a project group.
Example) If you do not want to grant Master permissions to the Master role holder of a project group for a specific project, register them as a project member and assign Developer or Viewer permissions.

Category	Permission	Owner	Master	Developer	Viewer
Dashboard	Lookup	○	○	○	○
Build pipeline	Lookup	○	○	○	○
Build pipeline	Import	○	○	○
Build pipeline	(development) create/add	○	○	○
Build pipeline	(development) run	○	○	○
Build pipeline	(Development) Fix	○	○	○
Build pipeline	(development) delete	○	○	○
Build pipeline	(Operation) Create/Add	○	○
Build pipeline	(operation) execution	○	○
Build pipeline	(Operation) Edit	○	○
Build pipeline	(Operation) Delete	○	○
helm install	(development) install	○	○	○
helm install	(Operation) Installation	○	○
Project	Edit	○	○
Project	Delete	○

Table. Permissions by role within the project (1)

Daegu division	Subcategory	Permission	Owner	Master	Developer	Viewer
Kubernetes deployment	Helm release	(development) lookup	○	○	○	○
Kubernetes deployment	Helm release	(development) upgrade	○	○	○
Kubernetes deployment	Helm release	(development) rollback	○	○	○
Kubernetes deployment	Helm release	(development) delete	○	○	○
Kubernetes deployment	Helm release	(Operation) Lookup	○	○	○	○
Kubernetes deployment	Helm release	(Operation) Upgrade	○	○
Kubernetes deployment	Helm release	(Production) Rollback	○	○
Kubernetes deployment	Helm release	(operation) Delete	○	○
Kubernetes deployment	Helm release	Import	○	○
Kubernetes deployment	Ingress/Service	Create/Update/Delete	○	○
Kubernetes deployment	Blue/Green	(development) create/modify/delete	○	○
Kubernetes deployment	Blue/Green	(Operations) Create/Update/Delete	○	○
Kubernetes deployment	Canary	(development) lookup	○	○	○	○
Kubernetes deployment	Canary	(Development) Create/Delete	○	○	○
Kubernetes deployment	Canary	(Operation) Query	○	○	○	○
Kubernetes deployment	Canary	(Operation) Create	○	○
Kubernetes deployment	Canary	(Operation) Delete	○	○
Kubernetes deployment	Istio	(development) query	○	○	○	○
Kubernetes deployment	Istio	(development) create/modify/delete	○	○	○
Kubernetes deployment	Istio	(Operation) Lookup	○	○	○	○
Kubernetes deployment	Istio	(Operation) Create/Edit	○	○
Kubernetes deployment	Istio	(Operation) Delete	○	○
Kubernetes deployment	Workload	(development) query	○	○	○	○
Kubernetes deployment	workload	(Development) Create/Delete/Rollback	○	○	○
Kubernetes deployment	workload	(Operation) Lookup	○	○	○	○
Kubernetes deployment	Workload	(Operational) Create/Rollback	○	○
Kubernetes deployment	Workload	(Operation) Delete	○	○
Code repository/Code quality/Artifact repository/Image repository	All	Lookup	○	○	○	○
Code repository/Code quality/Artifact repository/Image repository	All	Create	○	○	○
Code repository/Code quality/Artifact repository/Image repository	All	Delete	○	○

Table. Permissions by role within the project (2)

Jenkins system permissions
- Access permissions are granted based on the project permission hierarchy of DevOps Console.
  - Jenkins system permission table by role within the project reference
- Permissions are assigned to the Jenkins pipeline based on the project’s role assignments.
- For tools other than Jenkins, you can set permissions in the tool’s menu.

Category	Permission	Owner	Master	Developer	Viewer
(Folder) Project Group	Folder view	○	○	○	○
(folder) project	Credential lookup	○	○	○	○
(folder) project	Create/Update/Delete credentials	○	○
(folder) project	Folder view	○	○	○	○
(folder) project	Create folder
(folder) project	Folder Settings
(folder) project	Delete folder	○	○
(folder) type	(Development) Folder Lookup	○	○	○
(folder) type	(Development) Create pipeline
(folder) type	(development) folder settings
(folder) type	(Development) Delete folder	○	○	○
(folder) type	(Production) Folder Lookup	○	○
(folder) type	(Production) Pipeline creation
(folder) type	(Production) Folder Settings
(folder) type	(Operation) Delete folder	○	○
pipeline	(Development) View Pipeline	○	○	○
pipeline	(Development) Pipeline Configuration	○	○	○
pipeline	(Development) Delete pipeline	○	○	○
pipeline	(development) pipeline build	○	○	○
pipeline	(Production) Pipeline Lookup	○	○
pipeline	(Production) Pipeline Configuration	○	○
pipeline	(Production) Delete pipeline	○	○
pipeline	(Production) Pipeline Build	○	○

Table. Jenkins system permissions by role within the project

System roles and permissions

Daegu division	Subcategory	Permission	System Administrator	Administrator (Tenant Manager)	User (Project Group Owner)
tool	System tool	Register/Edit/Delete	○
Tool	System tool	Add/Modify supported tenant	○
tool	System tool	Delete supported tenant	○	○
tool	System tool	Add/Modify supported cluster	○
tool	System tool	Delete supported cluster	○	○	○
tool	Tenant tool	Register/Edit/Delete	○	○
tool	Tenant tool	Add/Modify/Delete supported tenant	○	○
tool	Project Group Tool	Register/Edit/Delete	○		○
tool	Project Group Tool	Add/Modify/Delete supported tenant	○		○

Table. System Roles and Permissions(1)

Daegu division	Subcategory	Permission	System Administrator	Administrator (Tenant Manager)	User (Project Group Owner)
App. Template	System template	Register/Edit/Delete	○
App. Template	System template	Add/Modify supported tenant	○
App. Template	System template	Delete supported tenant	○	○
App. Template	System template	Add/Modify/Delete Supported Images	○
App. Template	System template	Add/Modify/Delete supported Helm charts	○
App. Template	Tenant template	Register/Edit/Delete	○	○
App. Template	Tenant template	Add/Modify/Delete supported images	○	○
App. Template	Tenant template	Add/Modify/Delete supported Helm charts	○	○
App. Template	Project Group Template	Register/Edit/Delete	○		○
App. Template	Project Group Template	Add/Modify/Delete Supported Images	○		○
App. Template	Project Group Template	Add/Modify/Delete supported Helm charts	○		○
Helm chart management	System Helm chart	Add/Edit/Delete	○
Helm chart management	Tenant Helm chart	Add/Edit/Delete	○	○
Helm chart management	Project group Helm chart	Add/Edit/Delete	○		○
Project Group	All	Create	○	○	○

Table. System Roles and Permissions(2)

DevOps Console Introduction

Screen Configuration