Projects
As the volume of resources increases, users can use projects to group clusters and manage access to them. Because no granular access controls exist for resources below a project, all workspaces, jobs, and services inherit permissions from their project. Denying a user access to a parent cluster prevents the user from accessing any child clusters.
Users can create public or private projects.
Public projects
Public projects are accessible to all cloud members with implicit write permissions. These users don't appear in the Project permissions popup dialog in the UI.
Project owners can still grant individual permissions to public projects, allowing users to act with the highest level of their implicit and explicit permissions. For example, if the user is read only on a public project, they are able to act with write permissions. If that user is a project owner on the public project, they continue to act as a project owner.
Private projects
Private projects are accessible only to project owners or users with write or read-only access. Organization owners have implicit admin permissions. See project roles for more details.
Create projects
Each cloud has a public default project that Anyscale creates during cloud creation. By default, when a user creates a child cluster without specifying a project, Anyscale creates it in a default public project, making it accessible to all users with access to the associated cloud.
Users can specify a project name in job and service CLI commands or with the ANYSCALE_PROJECT_NAME
environment variable.
View projects
Cloud owners and collaborators can view the list of projects they have access to. They can access the projects page in one of two ways:
- Click on Manage Projects button in the project selector dropdown on the top left corner.
- Select Projects in the user's setting dropdown in the top right corner.
The project selector only appears if the user has access to more than one project in the selected cloud. Only the clusters that belong to the selected project appear in the UI.
Manage projects
Users can manage projects on the projects page:
- Cloud owners and collaborators can view the list of projects they have access to.
- Cloud owners and collaborators can create projects in the selected cloud.
- Project owners can manage other users' permissions on the project.
Project owners manage permissions in the Project permissions dialog from the Permissions button in the top left corner of project detail page.
Projects are associated with clouds. Because of this relationship, projects in multiple clouds can have the same name. When launching clusters, ensure you're using the correct cloud and project name.