Permissions and Visibility

​

Introduction

Both Edge Infrastructure Services and Edge Inference Services use role-based access control (RBAC), but each service has its own role system, its own set of predefined roles, and its own administration workflows. This article covers both systems.

​

Roles in Edge Infrastructure Services

​

How roles work

A role maps permissions to resource types across a defined scope. Permissions correspond to four operations: Create, Read, Update, and Delete (CRUD). Scope controls which projects a role applies to. A role can apply across all projects in an enterprise or be restricted to projects matching a specific tag. Your visible navigation, available actions, and accessible data all reflect your assigned role and the selected enterprise or project context.

​

Predefined roles

Edge Infrastructure Services includes four predefined system roles: SysAdmin, SysManager, SysOperator, and SysMonitor. System roles are read-only and cannot be modified or deleted. You can also create custom roles with any combination of permissions and scope. For the full permission matrix, see Manage Roles.

​

Roles in Edge Inference Services

Edge Inference Services uses a separate role system scoped to organizations rather than projects. Access control has two layers: system roles and organization roles. For the full role definitions, see Organizations, Users, and Roles.

​

System roles

The same four system roles used in Edge Infrastructure Services (SysAdmin, SysManager, SysOperator, SysMonitor) also control access to the Inference tab in the ZEDEDA console. A user who does not have a system role cannot see the Inference tab.

​

Organization roles

Within Edge Inference Services, access to models, deployments, and settings is controlled by organization roles. An organization is the logical container for a team’s ML models. Organization roles are assigned per user per organization and are independent of the system role. A user can hold a system role, one or more organization roles, or both.

​

Next Steps