This is an old revision of the document!


Roles and Rights in HPC Gateway

HPC Gateway manage following type of objects:

  • users
  • teams
  • projects
  • applications
  • addons
  • tasks
  • profiles
  • scripts
  • mountpoints
  • servers
  • clusters


Users belong to teams and projects.

Applications, addons, scripts, mount points, servers can be assigned to teams. Therefore, users defined in a team can access those objects belonging to the team.

Servers and tasks are assigned to projects. Therefore, users defined in a project can access those objects belonging to the project.

A user has the right to interact with an object only if this object belong to one of user's team or one of user's project .

Note that, as of today, profiles can not be assigned to a project. Also, clusters are not subject to permissions. These limitations should be removed soon.

A specific role super admin is available to give almost no limitation to a user. This role should be used with caution. By default, only hpcgadmin user has super admin role.

Standard user belongs to teams and projects. A user can have several roles depending on the team and project:

  • Team manager
  • Team editor
  • Team member
  • Project manager
  • Project editor
  • Project member

The rights attached to these roles are described below.

An application is in state draft or released. Released application can not be modified anymore. They can still be configured.

Role Create Use Edit Configure Change status
Super admin yes yes yes (draft) yes yes
Team manager yes yes (released) no yes yes
Team editor yes yes (released) no no no
Team member no yes (released) no no no
Owner - yes yes (draft) yes yes
Anyone no no no no no
Role Install Use Configure Uninstall
Super admin yes yes yes yes
Team manager no yes no no
Team editor no yes no no
Team member no yes no no
Anyone no no no no
Role Create Use Edit Send commands
Super admin yes yes yes yes
Project manager yes yes yes yes
Project editor yes yes no no
Project member yes yes no no
Owner yes yes yes yes
Anyone no no no no
Role Create Use Edit Change status Delete
Super admin yes yes (released) no yes yes
Project manager yes yes (released) no yes yes
Project editor yes yes (released) no no no
Project member yes yes (released) no no no
Owner - yes yes (draft) yes yes
Anyone no no no no no