> For the complete documentation index, see [llms.txt](https://run-ai-docs.nvidia.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://run-ai-docs.nvidia.com/self-hosted/2.22/infrastructure-setup/authentication/roles.md). # Roles This section explains the available roles in the NVIDIA Run:ai platform. A role is a set of permissions that can be assigned to a [subject in a scope](/self-hosted/2.22/platform-management/aiinitiatives/adapting-ai-initiatives.md#scopes-in-an-organization). A permission is a set of actions (View, Edit, Create and Delete) over a NVIDIA Run:ai entity (e.g. projects, workloads, users). ## Roles Table The Roles table can be found under **Access** in the NVIDIA Run:ai platform. The Roles table displays a list of roles available to users in the NVIDIA Run:ai platform. Both predefined and custom roles will be displayed in the table.

The Roles table consists of the following columns: | Column | Description | | ------------- | --------------------------------------- | | Role | The name of the role | | Created by | The name of the role creator | | Creation time | The timestamp when the role was created | ### Customizing the Table View * Filter - Click ADD FILTER, select the column to filter by, and enter the filter values * Search - Click SEARCH and type the value to search by * Sort - Click each column header to sort by * Column selection - Click COLUMNS and select the columns to display in the table * Download table - Click MORE and then Click Download as CSV. Export to CSV is limited to 20,000 rows. ## Reviewing a Role 1. To review a role click the role name on the table 2. In the role form review the following: * **Role name**\ The name of the role * **Entity**\ A system-managed object that can be viewed, edited, created or deleted by a user based on their assigned role and scope * **Actions**\ The actions that the role assignee is authorized to perform for each entity * **View** - If checked, an assigned user with this role can view instances of this type of entity within their defined scope * **Edit** - If checked, an assigned user with this role can change the settings of an instance of this type of entity within their defined scope * **Create** - If checked, an assigned user with this role can create new instances of this type of entity within their defined scope * **Delete** - If checked, an assigned user with this role can delete instances of this type of entity within their defined scope ## Roles in NVIDIA Run:ai NVIDIA Run:ai supports the following roles and their permissions. Under each role is a detailed list of the actions that the role assignee is authorized to perform for each entity.

Compute resource administrator

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	false	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	false	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	true	true	true
Credentials	false	false	false	false
Data sources	true	false	false	false
Data volumes	true	false	false	false
Environments	true	false	false	false
Storage class configurations	false	false	false	false
Templates	true	false	false	false

Credentials administrator

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	false	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	false	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	false	false	false
Credentials	true	true	true	true
Data sources	true	false	false	false
Data volumes	true	false	false	false
Environments	true	false	false	false
Storage class configurations	false	false	false	false
Templates	true	false	false	false

Data source administrator

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	false	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	false	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	false	false	false
Credentials	true	false	false	false
Data sources	true	true	true	true
Data volumes	true	false	false	false
Environments	true	false	false	false
Storage class configurations	true	false	false	false
Templates	true	false	false	false

Data volume administrator

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	false	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	false	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	false	false	false
Credentials	true	false	false	false
Data sources	true	false	false	false
Data volumes	true	true	true	true
Environments	true	false	false	false
Storage class configurations	false	false	false	false
Templates	true	false	false	false

Department administrator

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	true	true	true
Projects	true	true	true	true
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	true	false	false	false
Nodes	true	false	false	false
Access rules	true	true	true	true
Applications	true	true	true	true
Groups	true	true	true	true
Roles	true	false	false	false
Users	true	true	true	true
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	true	true	true	true
Workload properties	true	false	false	false
Workloads	true	true	true	true
Compute resources	true	true	true	true
Credentials	true	true	true	true
Data sources	true	true	true	true
Data volumes	true	true	true	true
Environments	true	true	true	true
Storage class configurations	true	false	false	false
Templates	true	true	true	true

Department viewer

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	false	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	true	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	false	false	false
Credentials	false	false	false	false
Data sources	true	false	false	false
Data volumes	true	false	false	false
Environments	true	false	false	false
Storage class configurations	false	false	false	false
Templates	true	false	false	false

Editor

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	true	true	true
Event history	false	false	false	false
Policies	true	true	true	true
Projects	true	true	true	true
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	true	false	false	false
Nodes	true	false	false	false
Access rules	true	true	true	true
Applications	true	false	false	false
Groups	true	false	false	false
Roles	true	false	false	false
Users	true	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	true	false	false	false
Workload properties	true	false	false	false
Workloads	true	true	true	true
Compute resources	true	true	true	true
Credentials	true	true	true	true
Data sources	true	true	true	true
Data volumes	true	true	true	true
Environments	true	true	true	true
Storage class configurations	true	false	false	false
Templates	true	true	true	true

Environment administrator

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	false	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	false	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	false	false	false
Credentials	false	false	false	false
Data sources	true	false	false	false
Data volumes	true	false	false	false
Environments	true	true	true	true
Storage class configurations	false	false	false	false
Templates	true	false	false	false

L1 researcher

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	false	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	true	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	true	false	false	false
Workload properties	true	false	false	false
Workloads	true	true	true	true
Compute resources	true	true	true	true
Credentials	true	true	true	true
Data sources	true	true	true	true
Data volumes	true	false	false	false
Environments	true	true	true	true
Storage class configurations	true	false	false	false
Templates	true	true	true	true

L2 researcher

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	false	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	true	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	false	false	false	false
Consumption dashboard	false	false	false	false
Overview dashboard	false	false	false	false
Inferences	false	false	false	false
Workload properties	true	false	false	false
Workloads	true	true	true	true
Compute resources	true	false	false	false
Credentials	true	false	false	false
Data sources	true	false	false	false
Data volumes	true	false	false	false
Environments	true	false	false	false
Storage class configurations	true	false	false	false
Templates	true	false	false	false

ML engineer

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	true	false	false	false
Nodes	true	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	true	true	true	true
Workload properties	true	false	false	false
Workloads	true	true	true	true
Compute resources	true	false	false	false
Credentials	true	false	false	false
Data sources	true	false	false	false
Data volumes	true	false	false	false
Environments	true	false	false	false
Storage class configurations	true	false	false	false
Templates	true	false	false	false

Research manager

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	true	true	true
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	true	false	false	false
Nodes	false	false	false	false
Access rules	true	true	true	true
Applications	false	false	false	false
Groups	false	false	false	false
Roles	true	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	true	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	true	true	true
Credentials	true	false	false	false
Data sources	true	true	true	true
Data volumes	true	true	true	true
Environments	true	true	true	true
Storage class configurations	true	false	false	false
Templates	true	true	true	true

System administrator

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	true	true	true
Event history	true	false	false	false
Policies	true	true	true	true
Projects	true	true	true	true
Security settings	true	true	true	true
Settings	true	true	true	true
Clusters	true	true	true	true
Node pools	true	true	true	true
Nodes	true	false	false	false
Access rules	true	true	true	true
Applications	true	true	true	true
Groups	true	true	true	true
Roles	true	true	true	true
Users	true	true	true	true
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	true	true	true	true
Workload properties	true	true	false	false
Workloads	true	true	true	true
Compute resources	true	true	true	true
Credentials	true	true	true	true
Data sources	true	true	true	true
Data volumes	true	true	true	true
Environments	true	true	true	true
Storage class configurations	true	true	true	true
Templates	true	true	true	true

Template administrator

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	false	false	false	false
Nodes	false	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	false	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	false	false	false
Credentials	false	false	false	false
Data sources	true	false	false	false
Data volumes	true	false	false	false
Environments	true	false	false	false
Storage class configurations	true	false	false	false
Templates	true	true	true	true

Viewer

Entity	View	Edit	Create	Delete
Account	true	false	false	false
Departments	true	false	false	false
Event history	false	false	false	false
Policies	true	false	false	false
Projects	true	false	false	false
Security settings	true	false	false	false
Settings	true	false	false	false
Clusters	true	false	false	false
Node pools	true	false	false	false
Nodes	true	false	false	false
Access rules	false	false	false	false
Applications	false	false	false	false
Groups	false	false	false	false
Roles	false	false	false	false
Users	false	false	false	false
Analytics dashboard	true	false	false	false
Consumption dashboard	true	false	false	false
Overview dashboard	true	false	false	false
Inferences	true	false	false	false
Workload properties	true	false	false	false
Workloads	true	false	false	false
Compute resources	true	false	false	false
Credentials	true	false	false	false
Data sources	true	false	false	false
Data volumes	true	false	false	false
Environments	true	false	false	false
Storage class configurations	false	false	false	false
Templates	true	false	false	false

Permitted workloads

When assigning a role with either one, all or any combination of the View, Edit, Create and Delete permissions for workloads, the subject has permissions to manage not only [NVIDIA Run:ai workloads](/self-hosted/2.22/workloads-in-nvidia-run-ai/workload-types.md) (Workspace, Training, Inference), but also a list of 3rd party workloads: * k8s: StatefulSet * k8s: ReplicaSet * k8s: Pod * k8s: Deployment * batch: Job * batch: CronJob * [machinelearning.seldon.io](http://machinelearning.seldon.io): SeldonDeployment * [kubevirt.io](http://kubevirt.io): VirtualMachineInstance * [kubeflow.org](http://kubeflow.org): TFJob * [kubeflow.org](http://kubeflow.org): PyTorchJob * [kubeflow.org](http://kubeflow.org): XGBoostJob * [kubeflow.org](http://kubeflow.org): MPIJob * [kubeflow.org](http://kubeflow.org): MPIJob * [kubeflow.org](http://kubeflow.org): Notebook * [kubeflow.org](http://kubeflow.org): ScheduledWorkflow * [amlarc.azureml.com](http://amlarc.azureml.com): AmlJob * [serving.knative.dev](http://serving.knative.dev): Service * [workspace.devfile.io](http://workspace.devfile.io): DevWorkspace * [ray.io](http://ray.io): RayCluster * [ray.io](http://ray.io): RayJob * [ray.io](http://ray.io): RayService * [tekton.dev](http://tekton.dev): TaskRun * [tekton.dev](http://tekton.dev): PipelineRun * [argoproj.io](http://argoproj.io): Workflow

## Using API Go to the [Roles](https://run-ai-docs.nvidia.com/api/2.22/authentication-and-authorization/roles) API reference to view the available actions. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://run-ai-docs.nvidia.com/self-hosted/2.22/infrastructure-setup/authentication/roles.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.