Access to clusters in OpenShift Cluster Manager is determined by your role in your Red Hat organization and any cluster-specific roles assigned to you.

Organization

An organization is defined in your Red Hat account. An organization can have many users, who each have a login to access Red Hat resources such as the Red Hat Hybrid Cloud Console and the Red Hat Customer Portal.

In OpenShift Cluster Manager, users can view all clusters created within their organization by default.

Organization Administrator

Each organization has one or more Organization Administrator users.

This is the highest permission level in an organization, and the only role that can manage user access and permissions within a Red Hat account. Organization Administrators can access and edit any cluster in the organization, as well as configure user roles on clusters in OpenShift Cluster Manager.

For more information about Red Hat account roles, see the resources linked in Additional resources.

Cluster Owner

The user that creates an OpenShift cluster is the Cluster Owner. This user can perform any action on the cluster and view all details about the cluster in OpenShift Cluster Manager.

Cluster Owners can allow other users in the same organization to manage and perform actions on their cluster by granting them the Cluster Editor role.

Organization Administrators have the same access to clusters as Cluster Owners.

You can also become the Cluster Owner on an existing cluster when another user transfers a cluster’s ownership to you, as described in Cluster ownership transfer, linked in Additional resources.

Cluster Editor

The Cluster Editor role allows you to edit, manage, and delete that cluster, similar to Cluster Owner. The one exception is that a Cluster Editor cannot grant roles on a cluster to other users. Only a Cluster Owner or an Organization Administrator in the Red Hat account can configure role bindings on clusters.

Note

The roles described here are assigned individually to a user for a specific cluster. To manage access for multiple users at once, or to grant access across all clusters in your organization, see Using role-based access control to assign users and groups, linked in Additional resources.