Chapter 4. Predefined User Access roles
The following table lists the predefined roles provided with User Access. Some of the predefined roles are included in the Default access group, which includes all authenticated users in your organization.
Only the Organization Administrator users in your organization inherit the roles in the Default admin access group. Because this group is provided by Red Hat, it is updated automatically when Red Hat assigns roles to the Default admin access group.
For more information about viewing predefined roles, see Chapter 2, Procedures for configuring User Access.
- NOTE
- Predefined roles are updated and modified by Red Hat and cannot be modified. The table might not contain all currently available predefined roles.
| Ansible Lightspeed administrator | Perform read operations for Organization Administrators on all Lightspeed charts. | X | |
|---|---|---|---|
| Automation Analytics administrator | Perform any available operation on Automation Analytics resources. | ||
| Automation Analytics editor | Perform read and update operations on Automation Analytics resources. | X | |
| Automation Analytics viewer | Perform read operations on Automation Analytics resources. | ||
| Cloud administrator | Perform any available operation on any source. | X | |
| Compliance administrator | Perform any available operation on Compliance resources. | X | |
| Compliance viewer | Perform read operations on Compliance resources. | X | |
| Content Template administrator | Perform any available operation on any Content Template resource. | X | |
| Content Template viewer | Perform read-only operations on Content Template resources. | X | |
| Cost OpenShift viewer | Perform read operations on cost reports related to OpenShift sources. | ||
| Cost Price List administrator | Perform read and write operations on cost models. | ||
| Cost Price List viewer | Perform read operations on cost models. | ||
| Cost administrator | Perform any available operation on cost management resources. | X | |
| Cost cloud viewer | Perform read operations on cost reports related to cloud sources. | ||
| Directory and Domain Services administrator | Create, read, update and delete Directory and Domains Services registrations. | X | |
| Directory and Domain Services viewer | Read Directory and Domains Services registrations. | X | |
| Drift analysis administrator | Perform any available operation on any Drift analysis resource. | X | |
| Drift viewer | Perform read-only operation on Drift analysis resources. | X | |
| Hybrid Committed Spend viewer | Perform read operations on any Hybrid Committed Spend report. | ||
| Inventory Hosts administrator | Perform read and update operations on Inventory Hosts data. | X | X |
| Inventory Hosts viewer | Perform read operations on Inventory Hosts data. | ||
| Inventory administrator | Perform any available operation on any Inventory resource. | ||
| Launch administrator | Perform read and update operations on launch reservation and related resources. | X | |
| Launch on AWS user | Perform update operations on AWS launch reservation and related resources. | ||
| Launch on Azure user | Perform update operations on Azure launch reservation and related resources. | ||
| Launch on Google Cloud user | Perform update operations on Google Cloud launch reservation and related resources. | ||
| Launch viewer | Perform read operations on launch reservation and related resources. | X | |
| Malware detection administrator | Perform any available operation on any malware-detection resource. | X | |
| Malware detection editor | Read any malware-detection resource as well as set malware acknowledgements. | ||
| Malware detection viewer | Perform read operations on any malware-detection resource. | ||
| Notifications administrator | Perform any available operation on notifications and integrations resources. | X | |
| Notifications viewer | Perform read operations on notifications and integrations resources. | X | |
| OCM IdP editor | Perform update operations on IdPs. | ||
| OCM Organization Administrator | Perform all available operations on the associated organization’s clusters. | ||
| OCM cluster autoscaler editor | Perform update operations on the cluster autoscaler. | ||
| OCM cluster editor | Perform update operations on clusters. | ||
| OCM cluster provisioner | Perform provision operations on clusters. | X | |
| OCM cluster viewer | Perform read operations on clusters. | X | |
| OCM machine pool editor | Perform update operations on machine pools. | ||
| OCP Advisor administrator | Perform any available operation on any OCP Advisor resource. | X | |
| Organization staleness and deletion administrator | Perform read and update operations on organization staleness and deletion data. | X | |
| Organization staleness and deletion viewer | Perform read operations on organization staleness and deletion data. | X | |
| Patch administrator | Perform any available operation on any Patch resource. | X | |
| Patch viewer | Perform read operations on any Patch resource. | X | |
| Policies administrator | Perform any available operation on any Policies resource. | X | |
| Policies viewer | Perform read operation on any Policies resource. | X | |
| RHC administrator | Perform any available operation on RHC manager resources. | X | |
| RHC user | Perform read operations on the current configurations on RHC manager and update actions to the activation keys. | X | |
| RHEL Advisor administrator | Perform any available operation on any RHEL advisor resource. | X | |
| RHEL Advisor viewer | Perform read operations on RHEL advisor data. | ||
| Remediations administrator | Perform any available operation on any Remediations resource | ||
| Remediations user | Perform create, read, update, delete operations on any Remediations resource. | X | |
| Repositories administrator | Perform any available operation on any repositories resource. | X | |
| Repositories uploader | Perform content upload to repositories. | ||
| Repositories viewer | Perform read operations on repositories resources. | X | |
| Resource Optimization administrator | Perform any available operation on any Resource Optimization resource. | X | |
| Resource Optimization user | Perform read operations on any Resource Optimization resource. | X | |
| Subscriptions administrator | Perform any available operation on any Subscriptions resource. | X | |
| Subscriptions viewer | Perform read operations on any Subscriptions resource. | X | |
| Tasks administrator | Perform any available operation on any Tasks resource. | X | |
| User Access administrator | Perform any available operation for a non-Organization Administrator to configure and manage user access to services hosted on console.redhat.com. This role can only be viewed and assigned by Organization Administrators. | X | |
| User Access principal viewer | Perform read operations as a non-Organization Administrator on principals within user access. | ||
| Vulnerability administrator | Perform any available operation on any Vulnerability resource. | X | |
| Vulnerability viewer | Perform read operations on any Vulnerability resource. | X | |
| Workspace administrator | Perform read and update operations on Workspace data. | X | |
| Workspace viewer | Perform read operations on Workspace data. |
