Skip to main content

User and access management

View Markdown

User and access management

Anyscale provides role-based access control at the organization, cloud, and project levels. Organization owners manage user access and assign roles to control what users can do.

For an overview of the Anyscale organization hierarchy, see Anyscale organization overview.

Manage users​

Organization owners can invite users, assign roles, and remove users from the organization.

To manage users in your organization, do the following:

  1. Click your user icon.
  2. Click Users & IAM.

From here, you can complete the following tasks:

  • Invite new users to your organization.
  • View and search existing users.
  • Modify user roles.
  • Delete users from your organization.
  • View and delete pending invites.

For step-by-step instructions, see Manage users.

Roles and permissions​

Anyscale provides roles at three levels:

  • Organization roles: Control administrative access to the organization.
  • Cloud roles: Control access to resources in a specific cloud.
  • Project roles: Control access to resources in a specific project.

For detailed role definitions and permissions, see Roles and permissions.

Projects​

Projects provide the most granular access control in Anyscale. Use projects to isolate teams, separate environments, and organize resources within a cloud.

For more information, see What is a project?.

Service accounts​

Service accounts are non-user identities for production integrations. Use service accounts to authenticate CI/CD pipelines, scheduling tools, and other automated systems.

For more information, see Anyscale service accounts.

Single sign-on​

Anyscale supports SAML 2.0 single sign-on (SSO) for enterprise authentication. IT administrators can manage user access through a central identity provider.

For configuration instructions, see Configure SSO for your Anyscale organization.

Access multiple organizations​

Most users belong to a single Anyscale organization. If you have access to multiple organizations, Anyscale prompts you to select one when you sign in.

To sign in directly to a specific organization, visit:

https://console.anyscale.com/register?organizationId=<organization_id>

To find your organization ID, do the following:

  1. Click your user icon.
  2. Click Organization settings.
  3. The organization ID displays in the General > Organizational details tab.
note

To access an additional organization with the same email address, an admin from that organization must invite you.