Roles

This section explains the available roles in the NVIDIA Run:ai platform.

A role is a set of permissions that can be assigned to a subject in a scope. A permission is a set of actions (View, Edit, Create and Delete) over a NVIDIA Run:ai entity (e.g. projects, workloads, users).

Roles Table

The Roles table can be found under Access in the NVIDIA Run:ai platform.

The Roles table displays a list of roles available to users in the NVIDIA Run:ai platform. It is not possible to create additional roles or edit or delete existing roles.

The Roles table consists of the following columns:

Column

Description

Role

The name of the role

Created by

The name of the role creator

Creation time

The timestamp when the role was created

Customizing the Table View

Filter - Click ADD FILTER, select the column to filter by, and enter the filter values
Search - Click SEARCH and type the value to search by
Sort - Click each column header to sort by
Column selection - Click COLUMNS and select the columns to display in the table
Download table - Click MORE and then Click Download as CSV. Export to CSV is limited to 20,000 rows.

Reviewing a Role

To review a role click the role name on the table
In the role form review the following:
- Role name The name of the role
- Entity A system-managed object that can be viewed, edited, created or deleted by a user based on their assigned role and scope
- Actions The actions that the role assignee is authorized to perform for each entity
  - View - If checked, an assigned user with this role can view instances of this type of entity within their defined scope
  - Edit - If checked, an assigned user with this role can change the settings of an instance of this type of entity within their defined scope
  - Create - If checked, an assigned user with this role can create new instances of this type of entity within their defined scope
  - Delete - If checked, an assigned user with this role can delete instances of this type of entity within their defined scope

Roles in NVIDIA Run:ai

NVIDIA Run:ai supports the following roles and their permissions. Under each role is a detailed list of the actions that the role assignee is authorized to perform for each entity.

Compute resource administrator

Credentials administrator

Data source administrator

Data volume administrator

Department administrator

Department viewer

Editor

Environment administrator

L1 researcher

L2 researcher

ML engineer

Research manager

System administrator

Template administrator

Viewer

Permitted workloads

When assigning a role with either one, all or any combination of the View, Edit, Create and Delete permissions for workloads, the subject has permissions to manage not only NVIDIA Run:ai workloads (Workspace, Training, Inference), but also a list of 3rd party workloads:

k8s: StatefulSet
k8s: ReplicaSet
k8s: Pod
k8s: Deployment
batch: Job
batch: CronJob
machinelearning.seldon.io: SeldonDeployment
kubevirt.io: VirtualMachineInstance
kubeflow.org: TFJob
kubeflow.org: PyTorchJob
kubeflow.org: XGBoostJob
kubeflow.org: MPIJob
kubeflow.org: MPIJob
kubeflow.org: Notebook
kubeflow.org: ScheduledWorkflow
amlarc.azureml.com: AmlJob
serving.knative.dev: Service
workspace.devfile.io: DevWorkspace
ray.io: RayCluster
ray.io: RayJob
ray.io: RayService

tekton.dev: TaskRun
tekton.dev: PipelineRun
argoproj.io: Workflow

Using API

Go to the Roles API reference to view the available actions.

PreviousSet Up SSO with OpenShift NextApplications

Last updated 12 days ago