Roles and permissions in Starwhale

Roles are used to assign permissions to users. Only Starwhale Server/Cloud has roles and permissions, and Starwhale Standalone does not.The Administrator role is automatically created and assigned to the user "admin". Some sensitive operations can only be performed by users with the Administrator role, for example, creating accounts in Starwhale Server.

Projects have three roles:

• Admin - Project administrators can read and write project data and assign project roles to users.
• Maintainer - Project maintainers can read and write project data.
• Guest - Project guests can only read project data.

Action	Admin	Maintainer	Guest
Manage project members	Yes
Edit project	Yes	Yes
View project	Yes	Yes	Yes
Create evaluations	Yes	Yes
Remove evaluations	Yes	Yes
View evaluations	Yes	Yes	Yes
Create datasets	Yes	Yes
Update datasets	Yes	Yes
Remove datasets	Yes	Yes
View datasets	Yes	Yes	Yes
Create models	Yes	Yes
Update models	Yes	Yes
Remove models	Yes	Yes
View models	Yes	Yes	Yes
Create runtimes	Yes	Yes
Update runtimes	Yes	Yes
Remove runtimes	Yes	Yes
View runtimes	Yes	Yes	Yes

The user who creates a project becomes the first project administrator. They can assign roles to other users later.