Roles & Permissions
What each role can do in DataAgent.
Roles
| Role | Description |
|---|---|
| Owner | Full control over the organisation, including billing and ownership transfer. There must always be at least one owner. |
| Admin | Manage members, clusters, and all incidents. Cannot transfer ownership or access billing. |
| Operator | Register and remove clusters. Resolve and dismiss incidents. Cannot manage members. |
| Viewer | Read-only access to incidents and clusters. Cannot make any changes. |
Permission matrix
| Action | Owner | Admin | Operator | Viewer |
|---|---|---|---|---|
| View incidents | ✓ | ✓ | ✓ | ✓ |
| Assign incidents | ✓ | ✓ | ✓ | |
| Resolve / dismiss incidents | ✓ | ✓ | ✓ | |
| Read a remediation plan | ✓ | ✓ | ✓ | ✓ |
| Record a remediation attempt | ✓ | ✓ | ✓ | |
| Trigger AI enrichment | ✓ | ✓ | ✓ | |
| Use AI chat | ✓ | ✓ | ✓ | |
| Register clusters | ✓ | ✓ | ✓ | |
| Remove clusters | ✓ | ✓ | ✓ | |
| Invite members | ✓ | ✓ | ||
| Change member roles | ✓ | ✓ | ||
| Remove members | ✓ | ✓ | ||
| Update organisation settings | ✓ | ✓ | ||
| Transfer ownership | ✓ |
Remediation plans are proposals, not approvals: any member can read one, but nothing in DataAgent approves or executes a plan on your behalf. Carrying the steps out happens on your side, and recording what ran needs the Operator role. See the CLI reference.
Changing a member’s role
- Go to Settings → Members
- Find the member
- Click their current role
- Select the new role
Admins can change roles up to and including Admin. Only Owners can grant the Owner role.
Removing a member
- Go to Settings → Members
- Find the member
- Click Remove
Removing a member revokes their access immediately. The last Owner cannot be removed.