You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/accounts/accounts-billing/new-relic-one-user-management/user-management-concepts.mdx
+4-7Lines changed: 4 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -131,18 +131,15 @@ You can create roles at three different scopes, each serving different purposes:
131
131
132
132
***Organization-scoped roles**: You apply these roles for organization-wide functions like managing authentication domains, creating accounts, configuring organization settings, or managing scorecards and teams. Standard roles include:
133
133
* <DNT>**Organization manager**</DNT>: Permissions related to organization settings, including adding accounts, and changing the name of the organization and accounts. This also includes sensitive observability tasks, such as deleting certain entities.
134
-
* <DNT>**Authentication domain manager**</DNT>: Permissions related to adding and managing users, including configuring authentication domains and customizing groups and roles. Options within this include:
135
-
* <DNT>**Manage**</DNT>: Can manage all aspects of authentication domains, including configuring domains and adding users.
136
-
* <DNT>**Read only**</DNT>: Can view authentication domain and user information.
137
-
* <DNT>**Add users**</DNT>: Can view user information, and add users to the organization, but lacks other auth domain configuration and management abilities.
138
-
* <DNT>**Read users**</DNT>: Can only view user information.
134
+
* <DNT>**Authentication domain manager**</DNT>: Permissions related to adding and managing users, including configuring authentication domains and customizing groups and roles.
139
135
* <DNT>**Billing**</DNT>: Lets a user view and manage billing and usage, and data retention. For organizations with multiple accounts, billing is aggregated in the <DNT>**reporting account**</DNT> (usually the first account created in an organization).
140
-
* <DNT>**Organization product admin**</DNT>: Permissions related to organization-scoped observability features like scorecard and team management. This is the organization-scoped equivalent to <strong>All product admin</strong>.
136
+
* <DNT>**Organization product admin**</DNT>: Permissions related to organization-scoped observability features like scorecard and team management. This is the organization-scoped equivalent to <strong>All product admin</strong>
137
+
* <DNT>**Organization read only**</DNT>: Provides read-only access to the New Relic platform organization-scoped features.
141
138
142
139
***Account-scoped roles**: You apply these roles for access to platform features within specific accounts, such as configuring APM settings, managing alerts, or running queries. These are the traditional roles most users work with. Standard roles include:
143
140
* <DNT>**All product admin**</DNT>: Includes all New Relic platform permissions except the ability to manage organization-level settings, users, and billing.
144
141
* <DNT>**Standard user**</DNT>: Provides access to our platform features but lacks permissions to configure those features and lacks organization-level and user management permissions.
145
-
* <DNT>**Read only**</DNT>: Provides read-only access to the New Relic platform.
142
+
* <DNT>**Read only**</DNT>: Provides read-only access to the New Relic platform account-scoped features.
146
143
147
144
***Entity-scoped roles**: You apply these roles for fine-grained access to specific resources like individual dashboards, fleets, or alert policies. This enables precise permission control at the individual resource level. You can create custom entity-scoped roles based on your needs.
0 commit comments