Skip to content

Commit 6ff407a

Browse files
Updates for roles and permissions guide
1 parent 241d748 commit 6ff407a

File tree

2 files changed

+24
-19
lines changed

2 files changed

+24
-19
lines changed

content/manuals/security/for-admins/roles-and-permissions.md

Lines changed: 23 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -9,30 +9,35 @@ aliases:
99
weight: 40
1010
---
1111

12-
Organization and company owners can assign roles to individuals giving them different permissions in the organization. This section is for owners who want to learn about the defined roles and their permission scopes.
12+
Organization and company owners can assign roles to individuals giving them different permissions in the organization. This guide outlines Docker's organization roles and their permission scopes.
1313

1414
## Roles
1515

16-
When you invite users to your organization, you assign a role. A role is a collection of permissions. Roles define access to perform actions like creating repositories, pulling images, creating teams, and configuring organization settings.
16+
When you invite users to your organization, you assign them a role. A role is a collection of permissions. Roles define whether users can create repositories, pull images, create teams, and configure organization settings.
1717

1818
The following roles are available to assign:
1919

20-
- **Member** - Non-administrative role. Members can view other members that are in the same organization.
21-
- **Editor** - Partial administrative access to the organization. Editors can create, edit, and delete repositories. They can also edit an existing team's access permissions.
22-
- **Organization owner** - Full organization administrative access. Organization owners can manage organization repositories, teams, members, settings, and billing.
23-
- **Company owner** - In addition to the permissions of an organization owner, company owners can configure settings for their associated organizations.
20+
- Member: Non-administrative role. Members can view other members that are in the same organization.
21+
- Editor: Partial administrative access to the organization. Editors can create, edit, and delete repositories. They can also edit an existing team's access permissions.
22+
- Organization owner: Full organization administrative access. Organization owners can manage organization repositories, teams, members, settings, and billing.
23+
- Company owner: In addition to the permissions of an organization owner, company owners can configure settings for their associated organizations.
2424

25-
Owners can manage roles for members of an organization on [Docker Hub](/manuals/admin/organization/members.md#update-a-member-role), as well members of an [organization](/manuals/admin/organization/members.md#update-a-member-role) or a [company](/manuals/admin/company/users.md#update-a-member-role) in the [Docker Admin Console](/manuals/admin/_index.md).
25+
Owners can manage roles for members of an organization using Docker Hub or the Admin Console:
26+
- Update a member role in [Docker Hub](/manuals/admin/organization/members.md#update-a-member-role)
27+
- Update an organization's members or company in the [Admin Console](/manuals/admin/company/users.md#update-a-member-role)
28+
- Learn more about [organizations and companies](/manuals/admin/_index.md)
2629

2730
## Permissions
2831

32+
> [!NOTE]
33+
>
34+
> Company owners have the same access as organization owners for all associated organizations. For more information, see [Company overview](/admin/company/).
35+
2936
The following sections describe the permissions for each role.
3037

3138
### Content and registry permissions
3239

33-
The following outlines content and registry permissions for member, editor, and organization owner roles. These permissions and roles apply to the entire organization, including all the repositories in the namespace for the organization.
34-
35-
Company owners have the same access as organization owners for all associated organizations. See [Company overview](/admin/company/).
40+
The following table outlines content and registry permissions for member, editor, and organization owner roles. These permissions and roles apply to the entire organization, including all the repositories in the namespace for the organization.
3641

3742
| Permission | Member | Editor | Organization owner |
3843
| :---------------------------------------------------- | :----- | :----- | :----------------- |
@@ -53,13 +58,13 @@ Company owners have the same access as organization owners for all associated or
5358

5459
When you add members to a team, you can manage their repository permissions. For team repository permissions, see [Create and manage a team permissions reference](/manuals/admin/organization/manage-a-team.md#permissions-reference).
5560

56-
See the following diagram for an example of how permissions may work for a user. In this example, the first permission check is for the role: member or editor. Editors have administrative permissions for repositories across the namespace of the organization. Members may have administrative permissions for a repository if they're a member of a team that grants those permissions.
61+
The following diagram provides an example of how permissions may work for a user. In this example, the first permission check is for the role: member or editor. Editors have administrative permissions for repositories across the namespace of the organization. Members may have administrative permissions for a repository if they're a member of a team that grants those permissions.
5762

5863
![User repository permissions within an organization](../images/roles-and-permissions-member-editor-roles.png)
5964

6065
### Organization management permissions
6166

62-
The following outlines organization management permissions for member, editor, organization owner, and company owner roles.
67+
The following table outlines organization management permissions for member, editor, organization owner, and company owner roles.
6368

6469
| Permission | Member | Editor | Organization owner | Company owner |
6570
| :---------------------------------------------------------------- | :----- | :----- | :----------------- | :------------ |
@@ -76,18 +81,18 @@ The following outlines organization management permissions for member, editor, o
7681
| Registry Access Management |||||
7782
| Set up Single Sign-On (SSO) and SCIM |||\* ||
7883
| Require Docker Desktop sign-in |||\* ||
79-
| Manage billing information (e.g. billing address) |||||
80-
| Manage payment methods (e.g. credit card or invoice) |||||
84+
| Manage billing information (for example, billing address) |||||
85+
| Manage payment methods (for example, credit card or invoice) |||||
8186
| View billing history |||||
8287
| Manage subscriptions |||||
8388
| Manage seats |||||
8489
| Upgrade and downgrade plans |||||
8590

8691
_\* If not part of a company_
8792

88-
### Docker Scout
93+
### Docker Scout permissions
8994

90-
The following outlines Docker Scout management permissions for member, editor, and organization owner roles.
95+
The following table outlines Docker Scout management permissions for member, editor, and organization owner roles.
9196

9297
| Permission | Member | Editor | Organization owner |
9398
| :---------------------------------------------------- | :----- | :----- | :----------------- |
@@ -97,9 +102,9 @@ The following outlines Docker Scout management permissions for member, editor, a
97102
| Create environments ||||
98103
| Manage registry integrations ||||
99104

100-
### Docker Build Cloud
105+
### Docker Build Cloud permissions
101106

102-
The following outlines Docker Build Cloud management permissions for member, editor, and organization owner roles.
107+
The following table outlines Docker Build Cloud management permissions for member, editor, and organization owner roles.
103108

104109
| Permission | Member | Editor | Organization owner |
105110
| ---------------------------- | :----- | :----- | :----------------- |

content/manuals/subscription/build-cloud/manage-seats.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,4 +40,4 @@ As an owner of the Docker Build Cloud team, you can invite members to access clo
4040

4141
Invitees receive an email with instructions on how they can accept the invite. After they accept, the seat will be marked as **Allocated** in the **User management** section in the Docker Build Cloud dashboard.
4242

43-
For more information on the permissions granted to members, see [Roles and permissions](/security/for-admins/roles-and-permissions#docker-build-cloud).
43+
For more information on the permissions granted to members, see [Roles and permissions](/manuals/security/for-admins/roles-and-permissions.md).

0 commit comments

Comments
 (0)