Project group roles and permissions
- The project group creator has Owner permission by default.
- Master lacks the project group deletion permission among the Owner’s permissions.
- Developers and Viewers have view‑only permissions.
| Category | Permission | Owner | Master | Developer | Viewer |
|---|---|---|---|---|---|
| Project Group | Lookup | ○ | ○ | ○ | ○ |
| Project Group | Edit | ○ | ○ | ||
| Project Group | Delete | ○ | |||
| project | Create | ○ | ○ | ||
| Project | Lookup | ○ | ○ | ○ | ○ |
| Member | Add | ○ | ○ | ||
| member | Lookup | ○ | ○ | ○ | ○ |
| Member | Delete | ○ | ○ |
Table. Permissions for each role within the project group
Project roles and permissions
- They are classified as Owner, Master, Developer, and Viewer.
- Viewer can only view.
- Developers can create or delete development-related functions.
- Example) build pipeline, Helm chart, deployment
- Owner/Master can view, create, and delete all functions within a project.
- The project role holder inherits the role holder of the project group.
- Even if you are not registered as a project member, you can perform the role in the project if you are a member of the project group.
- When a user’s project role and project group role differ, the project role takes precedence.
- In other words, you can restrict permissions for a specific project among the members of a project group.
- Example) If you do not want to grant Master permissions to the Master role holder of a project group for a specific project, register them as a project member and assign Developer or Viewer permissions.
| Category | Permission | Owner | Master | Developer | Viewer |
|---|---|---|---|---|---|
| Dashboard | Lookup | ○ | ○ | ○ | ○ |
| Build pipeline | Lookup | ○ | ○ | ○ | ○ |
| Build pipeline | Import | ○ | ○ | ○ | |
| Build pipeline | (development) create/add | ○ | ○ | ○ | |
| Build pipeline | (development) run | ○ | ○ | ○ | |
| Build pipeline | (Development) Fix | ○ | ○ | ○ | |
| Build pipeline | (development) delete | ○ | ○ | ○ | |
| Build pipeline | (Operation) Create/Add | ○ | ○ | ||
| Build pipeline | (operation) execution | ○ | ○ | ||
| Build pipeline | (Operation) Edit | ○ | ○ | ||
| Build pipeline | (Operation) Delete | ○ | ○ | ||
| helm install | (development) install | ○ | ○ | ○ | |
| helm install | (Operation) Installation | ○ | ○ | ||
| Project | Edit | ○ | ○ | ||
| Project | Delete | ○ |
Table. Permissions by role within the project (1)
| Daegu division | Subcategory | Permission | Owner | Master | Developer | Viewer |
|---|---|---|---|---|---|---|
| Kubernetes deployment | Helm release | (development) lookup | ○ | ○ | ○ | ○ |
| Kubernetes deployment | Helm release | (development) upgrade | ○ | ○ | ○ | |
| Kubernetes deployment | Helm release | (development) rollback | ○ | ○ | ○ | |
| Kubernetes deployment | Helm release | (development) delete | ○ | ○ | ○ | |
| Kubernetes deployment | Helm release | (Operation) Lookup | ○ | ○ | ○ | ○ |
| Kubernetes deployment | Helm release | (Operation) Upgrade | ○ | ○ | ||
| Kubernetes deployment | Helm release | (Production) Rollback | ○ | ○ | ||
| Kubernetes deployment | Helm release | (operation) Delete | ○ | ○ | ||
| Kubernetes deployment | Helm release | Import | ○ | ○ | ||
| Kubernetes deployment | Ingress/Service | Create/Update/Delete | ○ | ○ | ||
| Kubernetes deployment | Blue/Green | (development) create/modify/delete | ○ | ○ | ||
| Kubernetes deployment | Blue/Green | (Operations) Create/Update/Delete | ○ | ○ | ||
| Kubernetes deployment | Canary | (development) lookup | ○ | ○ | ○ | ○ |
| Kubernetes deployment | Canary | (Development) Create/Delete | ○ | ○ | ○ | |
| Kubernetes deployment | Canary | (Operation) Query | ○ | ○ | ○ | ○ |
| Kubernetes deployment | Canary | (Operation) Create | ○ | ○ | ||
| Kubernetes deployment | Canary | (Operation) Delete | ○ | ○ | ||
| Kubernetes deployment | Istio | (development) query | ○ | ○ | ○ | ○ |
| Kubernetes deployment | Istio | (development) create/modify/delete | ○ | ○ | ○ | |
| Kubernetes deployment | Istio | (Operation) Lookup | ○ | ○ | ○ | ○ |
| Kubernetes deployment | Istio | (Operation) Create/Edit | ○ | ○ | ||
| Kubernetes deployment | Istio | (Operation) Delete | ○ | ○ | ||
| Kubernetes deployment | Workload | (development) query | ○ | ○ | ○ | ○ |
| Kubernetes deployment | workload | (Development) Create/Delete/Rollback | ○ | ○ | ○ | |
| Kubernetes deployment | workload | (Operation) Lookup | ○ | ○ | ○ | ○ |
| Kubernetes deployment | Workload | (Operational) Create/Rollback | ○ | ○ | ||
| Kubernetes deployment | Workload | (Operation) Delete | ○ | ○ | ||
| Code repository/Code quality/Artifact repository/Image repository | All | Lookup | ○ | ○ | ○ | ○ |
| Code repository/Code quality/Artifact repository/Image repository | All | Create | ○ | ○ | ○ | |
| Code repository/Code quality/Artifact repository/Image repository | All | Delete | ○ | ○ |
Table. Permissions by role within the project (2)
- Jenkins system permissions
- Access permissions are granted based on the project permission hierarchy of
DevOps Console. - Permissions are assigned to the Jenkins pipeline based on the project’s role assignments.
- For tools other than Jenkins, you can set permissions in the tool’s menu.
- Access permissions are granted based on the project permission hierarchy of
| Category | Permission | Owner | Master | Developer | Viewer |
|---|---|---|---|---|---|
| (Folder) Project Group | Folder view | ○ | ○ | ○ | ○ |
| (folder) project | Credential lookup | ○ | ○ | ○ | ○ |
| (folder) project | Create/Update/Delete credentials | ○ | ○ | ||
| (folder) project | Folder view | ○ | ○ | ○ | ○ |
| (folder) project | Create folder | ||||
| (folder) project | Folder Settings | ||||
| (folder) project | Delete folder | ○ | ○ | ||
| (folder) type | (Development) Folder Lookup | ○ | ○ | ○ | |
| (folder) type | (Development) Create pipeline | ||||
| (folder) type | (development) folder settings | ||||
| (folder) type | (Development) Delete folder | ○ | ○ | ○ | |
| (folder) type | (Production) Folder Lookup | ○ | ○ | ||
| (folder) type | (Production) Pipeline creation | ||||
| (folder) type | (Production) Folder Settings | ||||
| (folder) type | (Operation) Delete folder | ○ | ○ | ||
| pipeline | (Development) View Pipeline | ○ | ○ | ○ | |
| pipeline | (Development) Pipeline Configuration | ○ | ○ | ○ | |
| pipeline | (Development) Delete pipeline | ○ | ○ | ○ | |
| pipeline | (development) pipeline build | ○ | ○ | ○ | |
| pipeline | (Production) Pipeline Lookup | ○ | ○ | ||
| pipeline | (Production) Pipeline Configuration | ○ | ○ | ||
| pipeline | (Production) Delete pipeline | ○ | ○ | ||
| pipeline | (Production) Pipeline Build | ○ | ○ |
Table. Jenkins system permissions by role within the project
System roles and permissions
| Daegu division | Subcategory | Permission | System Administrator | Administrator (Tenant Manager) | User (Project Group Owner) |
|---|---|---|---|---|---|
| tool | System tool | Register/Edit/Delete | ○ | ||
| Tool | System tool | Add/Modify supported tenant | ○ | ||
| tool | System tool | Delete supported tenant | ○ | ○ | |
| tool | System tool | Add/Modify supported cluster | ○ | ||
| tool | System tool | Delete supported cluster | ○ | ○ | ○ |
| tool | Tenant tool | Register/Edit/Delete | ○ | ○ | |
| tool | Tenant tool | Add/Modify/Delete supported tenant | ○ | ○ | |
| tool | Project Group Tool | Register/Edit/Delete | ○ | ○ | |
| tool | Project Group Tool | Add/Modify/Delete supported tenant | ○ | ○ |
Table. System Roles and Permissions(1)
| Daegu division | Subcategory | Permission | System Administrator | Administrator (Tenant Manager) | User (Project Group Owner) |
|---|---|---|---|---|---|
| App. Template | System template | Register/Edit/Delete | ○ | ||
| App. Template | System template | Add/Modify supported tenant | ○ | ||
| App. Template | System template | Delete supported tenant | ○ | ○ | |
| App. Template | System template | Add/Modify/Delete Supported Images | ○ | ||
| App. Template | System template | Add/Modify/Delete supported Helm charts | ○ | ||
| App. Template | Tenant template | Register/Edit/Delete | ○ | ○ | |
| App. Template | Tenant template | Add/Modify/Delete supported images | ○ | ○ | |
| App. Template | Tenant template | Add/Modify/Delete supported Helm charts | ○ | ○ | |
| App. Template | Project Group Template | Register/Edit/Delete | ○ | ○ | |
| App. Template | Project Group Template | Add/Modify/Delete Supported Images | ○ | ○ | |
| App. Template | Project Group Template | Add/Modify/Delete supported Helm charts | ○ | ○ | |
| Helm chart management | System Helm chart | Add/Edit/Delete | ○ | ||
| Helm chart management | Tenant Helm chart | Add/Edit/Delete | ○ | ○ | |
| Helm chart management | Project group Helm chart | Add/Edit/Delete | ○ | ○ | |
| Project Group | All | Create | ○ | ○ | ○ |
Table. System Roles and Permissions(2)