# Anyscale for admins

[View Markdown](/administration/overview.md)

# Anyscale for admins

This page provides an overview of the Anyscale platform for admins.

## Who are Anyscale admins?[​](#who-are-anyscale-admins "Direct link to Who are Anyscale admins?")

The user who first creates your Anyscale organization is the organization owner and admin. Organization owners can add additional admins by assigning them the organization owner role. Most admin tasks require the organization owner role in Anyscale. See [Organization owner](/administration/organization/permissions.md#org-owner).

Anyscale recommends following the principle of least privilege when configuring Anyscale roles. Organization owners inherit full privileges on all objects in Anyscale.

Many tasks require elevated privileges in the cloud provider account or Kubernetes cluster where you deploy your Anyscale cloud. Some tasks require configuring compute configs or building custom images to fully integrate Anyscale clusters with infrastructure in your cloud provider account. See [Define a Ray cluster](/configuration.md).

The following are examples of users that might need admin permissions on Anyscale:

* Systems integrators.
* DevOps and MLOps.
* Cloud admins.
* Data stewards.

note

All collaborators in an Anyscale cloud can create projects in that cloud deployment. When you create a project, you're the project owner and can set permissions for other users on your project. See [Project owner](/administration/organization/permissions.md#proj-owner).

## Where should you get started as an admin?[​](#where-should-you-get-started-as-an-admin "Direct link to Where should you get started as an admin?")

If your organization is brand new to Anyscale, see the following articles:

* [Get started for admins](/administration/get-started.md)
* [Platform architecture](/get-started/architecture.md)
* [Shared responsibility model](/administration/security-and-compliance/shared-responsibility-model.md)

The following table helps you navigate to product documentation aligned to common admin tasks and topics:

| Topic                        | Product docs                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Cloud resource configuration | You configure cloud resources for Anyscale clouds to allow Anyscale to manage Ray clusters in your cloud provider account or Kubernetes cluster. For an overview, see [Introduction to Anyscale clouds](/admin/cloud.md).See the following pages for more details on configuring cloud resources:- [Configure AWS resources for an Anyscale cloud](/admin/cloud/configure-aws.md)<br />- [Configure Google Cloud resources for an Anyscale cloud](/admin/cloud/configure-google-cloud.md)<br />- [Deploy Anyscale on Kubernetes](/admin/cloud/kubernetes.md)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| Managing compute             | Developers manage many cluster configuration tasks on Anyscale, but admins might need to help configure permissions and IAM roles for [compute configs](/configuration/compute.md) and [custom images](/container-image/custom-image.md).Admins can also do the following:- Specify [resource quotas](/administration/resource-management/resource-quotas.md) to control the number and type of instances that users can deploy.<br />- Configure [machine pools](/machine-pools.md) to use capacity reservations from your cloud provider account with Anyscale.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| Cloud IAM                    | Anyscale uses IAM roles in your cloud provider account to deploy infrastructure on your behalf and control access to resources in your cloud ecosystem.You configure additional IAM roles and permissions to customize permissions and grant access to cloud infrastructure.- You configure IAM roles for use by the Anyscale control plane and your customer data plane during cloud deployment.<br />- Use cloud IAM mapping to configure permissions for Ray clusters in your cloud account based on workload type, project, or user identity. See [Anyscale cloud IAM mapping](/iam/cloud-iam-mapping.md).<br />- You configure a default storage location during cloud deployment, but you can configure access to any cloud object storage location by adding permissions to the role attached to your Anyscale cluster. See [Access S3 buckets](/storage/s3.md) and [Access Google Cloud Storage buckets](/storage/gcs.md).<br />- Add IAM permissions to allow Anyscale to access secret managers in your cloud provider account. See [Secret management on Anyscale](/secrets.md).<br />- Configure IAM access to artifact registries such as ECR or Google Artifact Registry to use custom images. See [Use container images from an external registry](/container-image/image-registry.md). |
| User management              | You manage user permissions at the organization, cloud, or project level. See [Anyscale organization overview](/get-started/org-overview.md).- Anyscale recommends [configuring SSO](/administration/organization/configure-sso.md) for all organizations.<br />- Use [access controls](/administration/organization/permissions.md) to control user permissions.<br />- [Add](/administration/organization/user-management.md#add-org) or [delete](/administration/organization/user-management.md#delete) users from your organization.<br />- You can configure your Anyscale organization to [automatically add users as collaborators](/administration/organization/user-management.md#auto-add) when you deploy an Anyscale cloud.<br />- Create and manage [service accounts](/auth/service-accounts.md) for automations and integrated services that require authentication to Anyscale.                                                                                                                                                                                                                                                                                                                                                                                                       |
| Observability and monitoring | Anyscale provides admins with logs, dashboards, and alerts to help monitor access and resource utilization.Admins might also use the same monitoring tools available to developers to get a more granular view of compute resources. See [Monitor and debug Anyscale workloads](/monitoring.md).- [Audit logs](/administration/security-and-compliance/audit-logs.md) capture user events across the console, CLI, and SDK.<br />- Use [dashboards](/administration/resource-management/telescope-dashboard.md) to get an overview of resource use.<br />- Configure resource [notifications](/administration/resource-management/custom-notifications.md) to get alerts on certain events, such as when a service becomes unhealthy or a job succeeds or fails.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| Usage and billing            | You can control usage using [resource quotas](/administration/resource-management/resource-quotas.md), [user roles](/administration/organization/permissions.md), and [cloud IAM mapping](/iam/cloud-iam-mapping.md).- View the [usage dashboard](/administration/billing/usage-dashboard.md) to see an overview of Anyscale use over time and drill down into usage by workload, project, or user.<br />- Use [budgets](/administration/billing/budgets.md) to configure expected spend for an organization, cloud, or project and receive alerts if workloads exceed the budget.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |

## View organization settings[​](#org-console "Direct link to View organization settings")

Organization owners can view and manage many organization settings from the Anyscale console using the following steps:

1. [Log in to the Anyscale console](https://console.anyscale.com/).
2. Click the user icon.
3. Click **Organization settings**.

Your **Organization ID** and **Organization name** display.

Use the tabs to explore and configure various settings for your organization.