Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarify license types and IT type #4766

Merged
merged 12 commits into from
Jan 18, 2024
Merged

Clarify license types and IT type #4766

Show file tree
Hide file tree
Changes from 5 commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
6b732ed
Update enterprise-permissions.md
jeremyyeo Jan 17, 2024
110f225
Update cloud-seats-and-users.md
jeremyyeo Jan 17, 2024
3a10d0f
Update enterprise-permissions.md
jeremyyeo Jan 17, 2024
883ec90
Merge branch 'current' into jeremyyeo-patch-1
mirnawong1 Jan 18, 2024
0ecef1a
Update enterprise-permissions.md
mirnawong1 Jan 18, 2024
f42c800
Update website/docs/docs/cloud/manage-access/enterprise-permissions.md
mirnawong1 Jan 18, 2024
5de2962
Update cloud-seats-and-users.md
mirnawong1 Jan 18, 2024
3e9d013
Update website/docs/docs/cloud/manage-access/cloud-seats-and-users.md
mirnawong1 Jan 18, 2024
4033e2e
Update cloud-seats-and-users.md
mirnawong1 Jan 18, 2024
c6fc915
Update website/docs/docs/cloud/manage-access/enterprise-permissions.md
mirnawong1 Jan 18, 2024
68838a1
Merge branch 'current' into jeremyyeo-patch-1
mirnawong1 Jan 18, 2024
3288eb2
Update website/docs/docs/cloud/manage-access/cloud-seats-and-users.md
mirnawong1 Jan 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion website/docs/docs/cloud/manage-access/cloud-seats-and-users.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ In dbt Cloud, _licenses_ are used to allocate users to your account. There are t

- **Developer** — Granted access to the Deployment and [Development](/docs/cloud/dbt-cloud-ide/develop-in-the-cloud) functionality in dbt Cloud.
- **Read-Only** — Intended to view the [artifacts](/docs/deploy/artifacts) created in a dbt Cloud account. Read-Only users can receive job notifications but not configure them.
- **IT** — Can manage users, groups, and licenses, among other permissions. IT users can receive job notifications but not configure them. Available on Enterprise and Team plans only.
- **IT** — Can manage users, groups, and licenses, among other permissions. IT users can receive job notifications but not configure them. Available on Enterprise and Team plans only. On Enterprise plans - the IT license type provides the same access as the ["Security admin" permission set / role](https://docs.getdbt.com/docs/cloud/manage-access/enterprise-permissions#account-permissions-for-account-roles).
Copy link
Contributor

@mirnawong1 mirnawong1 Jan 18, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jeremyyeo should we also add 'billing admin' per this doc.

I've asked aaron here: https://dbtlabs.atlassian.net/browse/ENTERPRISE-1212

Suggested change
- **IT** — Can manage users, groups, and licenses, among other permissions. IT users can receive job notifications but not configure them. Available on Enterprise and Team plans only. On Enterprise plans - the IT license type provides the same access as the ["Security admin" permission set / role](https://docs.getdbt.com/docs/cloud/manage-access/enterprise-permissions#account-permissions-for-account-roles).
- **IT** — Can manage users, groups, and licenses, among other permissions. IT users can receive job notifications but not configure them. Available on Enterprise and Team plans only. In Enterprise plans, the IT license type grants access equivalent to the ['Security admin' and 'Billing admin' roles](/docs/cloud/manage-access/enterprise-permissions#account-permissions-for-account-roles).


The user's assigned license determines the specific capabilities they can access in dbt Cloud.

Expand Down
5 changes: 5 additions & 0 deletions website/docs/docs/cloud/manage-access/enterprise-permissions.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,11 @@ control (RBAC).

The following roles and permission sets are available for assignment in dbt Cloud Enterprise accounts. They can be granted to dbt Cloud groups which are then in turn granted to users. A dbt Cloud group can be associated with more than one role and permission set. Roles with more access take precedence.

::::tip Licenses or Permission sets
mirnawong1 marked this conversation as resolved.
Show resolved Hide resolved

The user's [license](/docs/cloud/manage-access/seats-and-users) type always overrides their assigned permission set. This means that even if a user belongs to a dbt Cloud group with 'Account Admin' permissions, having a 'Read-Only' license would still prevent them from performing administrative actions on the account
mirnawong1 marked this conversation as resolved.
Show resolved Hide resolved
:::

<Permissions feature={'/snippets/_enterprise-permissions-table.md'} />

## How to set up RBAC Groups in dbt Cloud
Expand Down
Loading