Users and Privileges
Wayfinder provides three user types out-of-the-box, each with associated privileges:
- Wayfinder Admin
- Workspace Admin
- Workspace Member
These user types are called Workspace Roles in Wayfinder. You can create more workspace roles as needed.
The table below shows what each user can do.
| Privileges | Wayfinder Admin | Workspace Admin | Workspace Member |
|---|---|---|---|
| Create workspace clusters and namespaces | ✔️ | ✔️ | ✔️ |
| Create and trigger container builds | ✔️ | ✔️ | ✔️ |
| Create build and deploy robots for CI | ✔️ | ✔️ | ✔️ |
| Set up ingress and network policies for apps | ✔️ | ✔️ | ✔️ |
| Invite users to workspaces where I'm a member | ✔️ | ✔️ | ✔️ |
| View security status for my workspace's clusters | ✔️ | ✔️ | ✔️ |
| Administer RBAC for my workspaces | ✔️ | ✔️ | |
| Create additional workspace roles | ✔️ | ✔️ | |
| Create custom Wayfinder roles and policies | ✔️ | ✔️ | |
| Promote workspace members to workspace admins | ✔️ | ✔️ | |
| Deploy Helm packages to workspace clusters | ✔️ | ✔️ | |
| Deploy Global Helm packages to all clusters | ✔️ | ||
| Add local users | ✔️ | ||
| Promote users to Wayfinder admins | ✔️ | ||
| Set up cloud accounts | ✔️ | ||
| Allocate cloud accounts to workspaces | ✔️ | ||
| Set up naming rules for clusters | ✔️ | ||
| Restrict access to cluster plans | ✔️ | ||
| Enable actual cost analysis | ✔️ | ||
| Manage IP address ranges | ✔️ | ||
| View security status for all clusters | ✔️ | ||
| Administer RBAC for any workspace | ✔️ | ||
| Invite users to any workspace | ✔️ |