Role-based access control

​

Overview

Goldsky supports Role Based Access Control (RBAC) to help you restrict what actions can be taken by different members of the team.

We support 4 different roles: Owner, Admin, Editor and Viewer. The permissions are listed below:

• Owner
  • Can do everything an Admin can do
  • Can add other Owners to the project
  • Can remove other Owners from the project
  • Can update the role of teammates to Owner
  • Can change the subscription and billing information of the project
• Admin
  • Can do everything an Editor can do
  • Can invite non-Owner teammates to a project
  • Can remove non-Owner teammates from a project
  • Can update the role of non-Owner teammates on a project
• Editor
  • Can do everything a Viewer can do
  • Can create, update and delete API keys
  • Can create, update and delete subgraphs
  • Can create, update and delete pipelines
  • Can create, update and delete secrets
  • Can create, update and delete webhooks
  • Can edit the name of a project
• Viewer
  • Can view subgraphs
  • Can view pipelines
  • Can view secrets
  • Can view webhooks
  • Can view metrics
  • Can view teammates
  • Can leave a project
  • Can create new projects

​

Using the Webapp

​

Adding a teammate to your project

When adding a teammate you will be prompted to select the desired role for the new teammate(s). The default selected role is Viewer

​

Changing the role of teammates

You must be an Admin to change the role of your teammate(s).

To manage the RBAC settings for the team members of a given project, select the project and navigate to the Settings menu. Click on the overflow menu and click on Update Role

​

Using the Command Line

​

Adding a teammate to your project

Use the --role flag of goldsky project users invite to select which role the invited users will have. The default role is Viewer.

goldsky project users invite --emails "<user1email>" "<user2email>" (passing as many emails as you want) --role <role>

​

Changing the role of teammates

Use the --role flag of goldsky project users update to change the role a user defined by the --email

goldsky project users update --email "<userToRemoveEmail>" --role <role>