Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarify license types and IT type #4766

Merged
merged 12 commits into from
Jan 18, 2024
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ In dbt Cloud, _licenses_ are used to allocate users to your account. There are t

- **Developer** — Granted access to the Deployment and [Development](/docs/cloud/dbt-cloud-ide/develop-in-the-cloud) functionality in dbt Cloud.
- **Read-Only** — Intended to view the [artifacts](/docs/deploy/artifacts) created in a dbt Cloud account. Read-Only users can receive job notifications but not configure them.
- **IT** — Can manage users, groups, and licenses, among other permissions. IT users can receive job notifications but not configure them. Available on Enterprise and Team plans only.
- **IT** — Can manage users, groups, and licenses, among other permissions. IT users can receive job notifications but not configure them. Available on Enterprise and Team plans only. On Enterprise plans - the IT license type provides the same access as the ["Security admin" permission set / role](https://docs.getdbt.com/docs/cloud/manage-access/enterprise-permissions#account-permissions-for-account-roles).
Copy link
Contributor

@mirnawong1 mirnawong1 Jan 18, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jeremyyeo should we also add 'billing admin' per this doc.

I've asked aaron here: https://dbtlabs.atlassian.net/browse/ENTERPRISE-1212

Suggested change
- **IT** — Can manage users, groups, and licenses, among other permissions. IT users can receive job notifications but not configure them. Available on Enterprise and Team plans only. On Enterprise plans - the IT license type provides the same access as the ["Security admin" permission set / role](https://docs.getdbt.com/docs/cloud/manage-access/enterprise-permissions#account-permissions-for-account-roles).
- **IT** — Can manage users, groups, and licenses, among other permissions. IT users can receive job notifications but not configure them. Available on Enterprise and Team plans only. In Enterprise plans, the IT license type grants access equivalent to the ['Security admin' and 'Billing admin' roles](/docs/cloud/manage-access/enterprise-permissions#account-permissions-for-account-roles).


The user's assigned license determines the specific capabilities they can access in dbt Cloud.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,15 @@ import SetUpPages from '/snippets/_available-enterprise-only.md';

<SetUpPages features={'/snippets/_available-enterprise-only.md'}/>

:::info Licenses vs Permission Sets

The type of [license](https://docs.getdbt.com/docs/cloud/manage-access/seats-and-users) that a user has takes
precedence over the exact permission set that the user has. This means that if a user has a "Read-Only" license
but is placed in a dbt Cloud group with "Account Admin" permissions - that user would still not be able to take
any administrative actions on the account as the license would restrict them from doing so.

:::

The dbt Cloud Enterprise plan supports a number of pre-built permission sets to
help manage access controls within a dbt Cloud account. See the docs on [access
control](/docs/cloud/manage-access/about-user-access) for more information on Role-Based access
Expand Down
Loading