Roles in the Cloud Foundry Environment

Roles determine which features users can view and access, and which actions they can initiate.

Cloud Foundry includes predefined roles that are specific to the navigation level in the SAP BTP cockpit; for example, the roles at the level of the organization differ from the ones for the space. Each role comes with a set of permissions. Roles apply to all operations that are associated with the organization or the space, irrespective of the tool used (Eclipse-based tools, SAP BTP cockpit, and cf CLI).

The following roles can be assigned to users in the Cloud Foundry environment on SAP BTP:

Level
Role
Role Description

Organization

Org Manager

Manages the organization.

Org Auditor

Provides read-only access to user information and org quota usage information.

Org User

Provides read-only access to the list of other organization users and their roles.

NoteWhen creating a space member, the Org User role is always one of the assigned organization roles. When creating an organization member, you can choose one or more of the following roles:

  • Org Manager

  • Org User

  • Org Auditor

Space

Space Manager

Manages a space within an organization.

Space Developer

Manages applications, services, and space-scoped service brokers in a space.

Caution

The Space Developer role has broad rights within Cloud Foundry and, in particular, has access to the credentials used in various services and app bindings as well as other sensitive data. For more information, see Giving Access Rights to Platform Usersarrow-up-right.

Space Auditor

Provides read-only access to a space.

Space Supporter

Allows you to troubleshoot and debug applications and service bindings in a space.

Note

To add the Space Supporter role using the set-space-role command, you need to have installed version 8 of the Cloud Foundry Command Line Interface (cf CLI). See https://docs.cloudfoundry.org/cf-cli/install-go-cli.htmlInformation published on non-SAP sitearrow-up-right.

Note

Managing members and roles for an organization takes place on the navigation level of the subaccount to which the organization is assigned.

For more information about organization and space roles in Cloud Foundry, see https://docs.cloudfoundry.org/concepts/roles.htmlInformation published on non-SAP sitearrow-up-right.

Last updated