Deployment space collaborator roles and permissions
When you add collaborators to a deployment space, you can specify which actions they can do by assigning them access levels. Learn how to add collaborators to your deployment spaces and the differences between access levels.
User roles and permissions in deployment spaces
You can assign the following roles to collaborators based on the access level that you want to provide:
- Admin: Administrators can control your deployment space assets, users, and settings.
- Editor: Editors can control your space assets.
- Viewer: Viewers can view your deployment space.
The following table provides details on permissions based on user access level:
| Enabled permission | Viewer | Editor | Admin |
|---|---|---|---|
| View assets and deployments | ✓ | ✓ | ✓ |
| Comment | ✓ | ✓ | ✓ |
| Monitor | ✓ | ✓ | ✓ |
| Test model deployment API | ✓ | ✓ | ✓ |
| Find implementation details | ✓ | ✓ | ✓ |
| Configure deployments | ✓ | ✓ | |
| Batch deployment score | ✓ | ✓ | |
| Online deployment score | ✓ | ✓ | ✓ |
| Update assets | ✓ | ✓ | |
| Import assets | ✓ | ✓ | |
| Download assets | ✓ | ✓ | |
| Deploy assets | ✓ | ✓ | |
| Remove assets | ✓ | ✓ | |
| Remove deployments | ✓ | ✓ | |
| View spaces/members | ✓ | ✓ | ✓ |
| Delete space | ✓ |
Service IDs
You can create service IDs in IBM Cloud to enable an application outside of IBM Cloud access to your IBM Cloud services. Service IDs are not tied to a specific user. Therefore, if a user leaves an organization and is deleted from the account, the service ID remains. Thus, your application or service stays up and running. For more information, see Creating and working with service IDs.
To learn more about assigning space access by using a service ID, see Adding collaborators to your deployment space.
User Groups
You can add user groups as collaborators if your IBM Cloud account contains IAM access groups. An IBM Cloud account administrator can create IAM access groups, which are then available as user groups in projects. If a user is added to a workspace more than once, they have a higher role. For example, if a user is added as an individual with Editor role and as part of a user group with Admin role, that user has the Admin role. For more information, see Setting up IAM access groups.
Adding collaborators to your deployment space
Prerequisites:
All users in your IBM Cloud account with the Admin IAM platform access role for all IAM enabled services or for Cloud Pak for Data can manage space collaborators. For more information, see
IAM Platform access roles.
Restriction:
You can add collaborators to your deployment space only if they are a part of your organization and if they provisioned watsonx.ai Studio.
To add one or more collaborators to a deployment space:
- From your deployment space, go to the Manage tab and click Access Control.
- Click Add collaborators and choose one of the following options:
- If you want to add a user, click Add users. Assign a role that applies to the user.
- If you want to add pre-defined user groups, click Add service IDs. Assign a role that applies to all members of the group.
- Add the user or user groups that you want to have the same access level and click Add.
Parent topic: Deployment spaces