Managing Organization Permissions

Complete list of default permissions granted to Org Admin and Org Billing Manager roles.
Tags:
Categories:
PermissionsOrg AdminOrg Billing Manager
Create new user accounts✅❌
Delete org✅*❌
Transfer org ownership to another member of the org✅*❌
Add (invite) people to org✅❌
Remove people from org✅❌
Add (invite) people to all teams under org✅❌
Remove people from all teams✅❌
Create and remove teams✅*❌
CRUD on billing information (Subscription/Plans)✅✅
Assign/unassign Org Admin to members of org✅*❌
Assign/unassign Org Billing Manager to members of org✅*❌
View all organization members and teams✅❌
CRUD on workspaces✅❌
Add or remove roles✅*❌
Assign roles to members of org✅❌
Add or remove keys and keychains✅❌
Create or remove secret teams✅*❌
Create or remove child teams (hierarchical teams)✅*❌
Assign keys and keychains to roles✅❌
Assign keys and keychains to teams✅❌
Approve/Deny requests (GitOps, Access, Publish etc)✅❌
Set spending limits✅*✅
Purchase new capabilities✅*✅
Approve/Deny purchase requests for new capabilities✅*✅

The default permissions can be adjusted through granular permissions using keys and keychains, note that certain permissions marked with * are only allowed if you’re the organization owner.

Last modified November 23, 2023: cleanup (aa2f069)