This is an old revision of the document!


Roles and Rights in HPC Gateway

HPC Gateway manage following type of objects:

  • Users
  • Teams
  • Projects
  • Applications
  • Addons
  • Tasks
  • Profiles

Users belong to teams and projects.

Applications and addons belong to teams. Therefore, a team gives access to applications and addons to users.

Tasks and profiles belong to projects. Therefore, a project gives access to tasks and profiles to users.

A user has the right to interact with an object only if this object belong to one of user's team or one of user's project .

A specific role super admin is available to give almost no limitation to a user. This role should be used with caution. By default, only hpcgadmin user has super admin role.

Standard user belongs to teams and projects. A user can have several roles depending on the team and project:

  • Team manager
  • Team editor
  • Team member
  • Project manager
  • Project editor
  • Project member

The rights attached to these roles are described below.

An application is in state draft or released. Released application can not be modified anymore. They can still be configured.

Role Create Use Edit Configure Change status
Super admin yes yes yes (draft) yes yes
Team manager yes yes (released) no yes yes
Team editor yes yes (released) no no no
Team member no yes (released) no no no
Owner - yes yes (draft) yes yes
Anyone no no no no no
Role Install Use Configure Uninstall
Super admin yes yes yes yes
Team manager no yes no no
Team editor no yes no no
Team member no yes no no
Anyone no no no no
Role Create Use Edit Send commands
Super admin yes yes yes yes
Project manager yes yes yes yes
Project editor yes yes no no
Project member yes yes no no
Owner yes yes yes yes
Anyone no no no no
Role Create Use Edit Change status Delete
Super admin yes released no yes yes
Project manager yes released no yes yes
Project editor yes released no no no
Project member yes released no no no
Owner - yes draft yes yes
Anyone no no no no no