RBAC · 9.2
Roles
TLSPilot supports the following roles:
| Role | Permissions |
|---|---|
| Owner | Has all permissions. |
| Manager | Can create and change certificates and deployments, force a renewal, export certificates and manage credentials. Cannot view or change the settings and RBAC, cannot delete or revoke certificates, cannot change the RBAC of a certificate or run the deployment & health cycle; these actions are reserved for the Owner. |
| Deployment Admin | Can configure, change and start deployments. |
| Deployer | Can only start deployments, but cannot change deployments or certificates. |
| Credential Admin | Manages credentials and who may use them. Can view all certificates and deployments, but cannot change them. |
| Reader | Can view all certificates and deployments, but not the settings, and cannot change anything. |