Skip to main content
Requires Enterprise plan. Contact sales for access.
Organization roles let you delegate administrative responsibilities without granting full organization admin access. Assign these roles to groups to give team members management capabilities over specific resource types.

​
Available roles

RoleDescription
Runners AdminFull admin access to all runners in the organization
Projects AdminFull admin access to all projects in the organization
Groups AdminFull admin access to all groups in the organization
Automations AdminFull admin access to all automations (services and tasks)

​
How it works

When you assign an organization role to a group:
  1. All group members receive admin permissions on existing resources of that type
  2. New resources automatically grant admin access to the group
  3. Removing the role revokes all related permissions
This differs from Sharing resources, which grants access to specific projects or runners one at a time.

​
Assign an organization role

Only organization admins can assign organization roles.
  1. Go to Settings → Members → Groups
  2. In the groups table, find the group you want to modify
  3. Toggle the checkbox in the corresponding role column (e.g., Runners Admin, Projects Admin)
The role is applied immediately when the checkbox is toggled.
Groups table showing role checkbox columns for Runners Admin, Projects Admin, Groups Admin, and Automations Admin

​
Permissions by role

​
Runners Admin

Members of groups with this role can:
PermissionGranted
View all runners✅
Create runners✅
Update runner settings✅
Delete runners✅
Share runners with users and groups✅
Manage environment classes✅
Manage SCM and LLM integrations✅
Access runner logs✅

​
Projects Admin

Members of groups with this role can:
PermissionGranted
View all projects✅
Create projects✅
Update project settings✅
Delete projects✅
Share projects with users and groups✅
Manage project secrets✅
Configure environment classes✅
Manage prebuilds✅

​
Groups Admin

Members of groups with this role can:
PermissionGranted
View all groups✅
Create groups✅
Update group settings✅
Delete groups✅
Add and remove group members✅

​
Automations Admin

Members of groups with this role can:
PermissionGranted
View all automations✅
Create automations✅
Update automation settings✅
Delete automations✅
Share automations with users and groups✅
View all execution history✅

​
Use cases

DevOps team manages infrastructure: Assign Runners Admin to a “DevOps” group so they can create and configure runners without full org admin access. Team leads manage their projects: Assign Projects Admin to a “Tech Leads” group so they can manage project settings and secrets across the organization. HR manages team membership: Assign Groups Admin to an “HR” group so they can add and remove members from groups as people join or leave. Platform team manages automations: Assign Automations Admin to a “Platform” group so they can create and maintain organization-wide automations.

​
Combining roles

A group can have multiple organization roles. For example, a “Platform Engineering” group might have both Runners Admin and Automations Admin roles. When a user belongs to multiple groups with different roles, they receive the combined permissions from all their groups.

​
Next steps