Skip to main content

RBAC Migration Guide

Use this guide to migrate your users to RBAC and understand the changes for your existing users.

Existing Users​

Existing users will be given the following roles automatically. You'll need to adjust their user access accordingly.

  • If a user had an Admin role, they are given the role of Org Admin, Project Admin, and Environment Admin.

  • If a user had a non-administrative role, then they are given the role of Org Contributors, Project Admins, and Environment Admin.

Licensing​

Any user assigned at least one of the following roles, will count towards your license allocation.

  • Org Admin

  • Project Admin

  • Project Architect

  • Project Contributor

Users who are only assigned the following roles are considered read-only users and will not count against the license allocation. The user can't be assigned any of the above roles.

  • Org Contributor

  • Org Member

  • Project Member

  • Environment Admin

  • Environment Reader

Service Accounts​

Service accounts should only be granted from one of the following roles:

If your service account needs to deploy and refresh, assign the Environment Admin role.

  • Org Contributor

  • Org Member

  • Project Member

  • Environment Reader

  • Environment Admin