This topic gives you a summary of the level of access each role has at the Kubernetes cluster scope in Tanzu Platform.
Business Applications
| Tanzu Platform page | Feature | Admin | Operator | Viewer |
|---|---|---|---|---|
| Applications > Business Applications | View business applications | No | No | No |
| Applications > Business Applications | Manage business applications (create/update/delete) | No | No | No |
| Applications > Apps and Microservices | View apps and microservices | Yes | Yes | Yes |
Spring
| Tanzu Platform page | Feature | Admin | Operator | Viewer |
|---|---|---|---|---|
| Assessment Center > Assessment | Create new Spring health assessments by uploading a software bill of materials (SBOM) | No | No | No |
| Assessment Center > Results | View the summary of the assessment, the list of libraries, and the download results | No | No | No |
| Assessment Center > Results | Rerun the assessment | No | No | No |
| Policies > Application Policies | View application policies | No | No | No |
| Policies > Application Policies | Manage application policies (create/edit/delete) | No | No | No |
| Policies > Application Policies | Activate and deactivate application policies | No | No | No |
| Policies > Application Policies | Run application policies on-demand (Run Now) | No | No | No |
| Policies > Application Policies | View and filter application policies findings | No | No | No |
| Policies > Application Policies | Suppress application policies findings | No | No | No |
| Setup & Configuration > Repositories | View the list of Git repositories | No | No | No |
| Setup & Configuration > Repositories | Manage Git repositories | No | No | No |
Kubernetes Spaces
| Tanzu Platform page | Feature | Admin | Operator | Viewer |
|---|---|---|---|---|
| Developer Tools > Repositories | View the list of Git repositories and their details including libraries and assessment | No | No | No |
| Developer Tools > Repositories | Analyze Git repositories on-demand and by schedule | No | No | No |
| Developer Tools > Build | View application builds | No | No | No |
| Spaces > Overview | View the list and details of Spaces including ContainerApps, Services, ContainerApps Bindings, ContainerApps Logs, Kubernetes Services, Ingress & Egress, Network Topology, Space configuration | No | No | No |
| Spaces > Overview | Add Spaces | No | No | No |
| Spaces > Overview | Edit or delete a Space | No | No | No |
| Spaces > Overview | View and download the configuration YAML for a Space | No | No | No |
| Spaces > Overview > Applications | Manage ContainerApps including scale, stop, and restart (add/edit/delete) | No | No | No |
| Spaces > Overview > Services | Manage services and application bindings (add/edit/delete) | No | No | No |
| Spaces > Overview > Ingress & Egress | Manage ingress and egress in a Space (add/edit/delete) | No | No | No |
| Spaces > Overview > Applications > Overview > Secrets | View Secrets | No | No | No |
| Spaces > Overview > Applications > Overview > Secrets | Manage Secrets (add/edit/delete) | No | No | No |
| Spaces > Profiles | View the list and details of Profiles | No | No | No |
| Spaces > Profiles | View and download the Profile YAML | No | No | No |
| Spaces > Profiles | Manage Profiles (add/edit/delete) | No | No | No |
| Spaces > Profiles > Traits | View the list and details of Traits | No | No | No |
| Spaces > Profiles > Traits | View and download the Trait package YAML for Spaces | No | No | No |
| Spaces > Profiles > Traits | Manage Traits (add/edit/delete) | No | No | No |
| Spaces > Capabilities | View the list and details of available Capabilities | No | No | No |
| Spaces > Capabilities | Install new Capabilities | No | No | No |
| Spaces > Capabilities | View the list and details of installed Capabilities | No | No | No |
| Spaces > Capabilities | Edit and change version and uninstall Capabilities | No | No | No |
| Spaces > Capabilities | View the list and details of packages | No | No | No |
| Spaces > Capabilities | Perform actions on Packages | No | No | No |
| Spaces > Availability Targets | View the list and details of Availability Targets | No | No | No |
| Spaces > Availability Targets | View and download the configuration YAML for Availability Targets | No | No | No |
| Spaces > Availability Targets | Manage Availability Targets (create/edit/delete) | No | No | No |
| Setup & Configuration > Networking > Domains | View the list and details of domains | No | No | No |
| Setup & Configuration > Networking > Domains | Manage domains (add/edit/delete) | No | No | No |
| Setup & Configuration > Networking > Domains | Manage domain bindings (add/edit/delete) | No | No | No |
| Setup & Configuration > Networking > Domains | View the list and details of domain bindings | No | No | No |
| Setup & Configuration > Networking > DNS Provider | View the list and details of DNS providers | No | No | No |
| Setup & Configuration > Networking > DNS Provider | Manage DNS providers (add/edit/delete) | No | No | No |
| Setup & Configuration > Networking > Certificate Provider | View the list and details of certificate providers | No | No | No |
| Setup & Configuration > Networking > Certificate Provider | Manage certificate providers (add/edit/delete) | No | No | No |
| Infrastructure > Kubernetes Clusters | View the list and details of cluster groups | No | No | No |
| Infrastructure > Kubernetes Clusters | Create cluster groups | No | No | No |
| Infrastructure > Kubernetes Clusters | View the list and details of clusters (overview/nodes/pods/node pools/events) | Yes | Yes | Yes |
| Infrastructure > Kubernetes Clusters | Manage node pools (add/edit) | Yes | No | No |
| Infrastructure > Kubernetes Clusters | Read-only access to the cluster | Yes | Yes | Yes |
| Infrastructure > Kubernetes Clusters | Edit, move, delete, or unmanage a cluster | Yes | No | No |
| Infrastructure > Kubernetes Clusters | Create an EKS cluster | Yes | No | No |
| Infrastructure > Kubernetes Clusters | Manage an EKS cluster | Yes | No | No |
| Infrastructure > Kubernetes Clusters | Attach a self-managed cluster | Yes | No | No |
| Policies > Space Policies | View the list and details of Space policies | No | No | No |
| Policies > Space Policies | Create and edit configuration and delete Spaces | No | No | No |
| Policies > Space Policies | View the Space resource limit policy | No | No | No |
| Policies > Space Policies | Edit and delete Space a resource limit policy | No | No | No |
Cloud Foundry
| Tanzu Platform page | Feature | Admin | Operator | Viewer |
|---|---|---|---|---|
| Infrastructure > Foundations | View the list and details of Cloud Foundry foundations | No | No | No |
| Setup and Configurations > Foundation Management (TAS Foundation Collector) | View the list and details of configured Cloud Foundry collectors | No | No | No |
| Setup and Configurations > Foundation Management (TAS Foundation Collector) | Manage Cloud Foundry collectors (add/edit/delete) | No | No | No |
Software Catalog
| Tanzu Platform page | Feature | Admin | Operator | Viewer |
|---|---|---|---|---|
| Software Catalog | View the list of software catalogues | No | No | No |
| Software Catalog | View individual catalog item pages | No | No | No |
| Bitnami Application Catalogue | View the list and details for Bitnami application catalogue | No | No | No |
Observability
| Tanzu Platform page | Feature | Admin | Operator | Viewer |
|---|---|---|---|---|
| Setup & Configuration > Alert Management | Create a new alert definition policy | No | No | No |
| Setup & Configuration > Alert Management | Update an existing alert definition policy | No | No | No |
| Setup & Configuration > Alert Management | View all alert definition policies and their details | No | No | No |
| Setup & Configuration > Alert Management > Metrics | Query stats | No | No | No |
| Setup & Configuration > Alert Management > Logs | View logs | No | No | No |
| Setup & Configuration > Alert Management > Logs | View the log patterns | No | No | No |
| Setup & Configuration > Alert Management > Logs | View the exceptions | No | No | No |
Core Platform
| Tanzu Platform page | Feature | Admin | Operator | Viewer |
|---|---|---|---|---|
| Home | View the dashboard, switch dashboard, and add or remove widgets | No | No | No |
| Home | Manage dashboards (create/edit/delete/assign/scope) | No | No | No |
| Setup and Configurations > Dashboard Sharing | Manage dashboards (create/edit/delete) | No | No | No |
| Setup and Configurations > Dashboard Sharing | Share dashboards | No | No | No |
| Infrastructure > Search | Use search query for inventory (write/save/delete). View and export search results. | Yes | Yes | Yes |
| Infrastructure > Search | Edit layout for resource details | Yes | Yes | Yes |
| Setup and Configurations > Access Control | Manage users and their roles for a scope (add/edit/delete) | Yes | No | No |
| Setup and Configurations > VCF Collectors | View the list and details of VCF collectors | No | No | No |
| Setup and Configurations > VCF Collectors | Manage VCF collectors (add/edit/delete) | No | No | No |
| Setup and Configurations > Projects | View the list and details of configured Projects | No | No | No |
| Setup and Configurations > Projects | Manage Projects (create/delete) | No | No | No |
| Setup and Configurations > Projects | Edit Projects | No | No | No |
| Setup and Configurations > Projects | Manage users and their roles for a Project (add/edit/delete) | No | No | No |
| Setup and Configurations > Projects | Manage resources, such as public cloud accounts or Kubernetes clusters, for a Project (add/edit/delete) | No | No | No |
| Developer resources | View developer resources | Yes | Yes | Yes |
Salt
| Tanzu Platform page | Feature | Admin | Operator | Viewer |
|---|---|---|---|---|
| Setup and Configurations > Salt configurations | Configure Salt Master | No | No | No |
Content feedback and comments