> See the full index of documentation pages at https://docs.zettabyte.com/llms.txt.

# Roles and permissions

> Who can do what in a zCLOUD tenant.

Source: https://docs.zettabyte.com/docs/accounts-and-roles/roles-and-permissions

Last updated: 2026-07-21

zCLOUD uses a small set of roles to control who can provision compute, spend, and manage other users. This page describes the standard roles and what each one can do.

## The role hierarchy

From the widest scope to the narrowest, the standard roles are:

- **Super admin**: platform-level administration.
- **Distributor**: provisions and allocates resources and quota to tenants, and handles wallet top-ups and purchasing on a tenant's behalf.
- **Tenant admin**: manages a single tenant, including inviting users, purchasing and releasing resources, and managing the tenant's work.
- **Compute user**: a compute-only role that can consume compute resources but cannot view instances or request more resources. Compute user is a working English name and the final label is pending.

> [!NOTE]
> **Roles are configured per deployment**
> Roles are configured per deployment rather than hard-coded in the product. Treat the set above as the standard model, and note that the exact roles available can vary by deployment.

## What each role can do

The matrix below summarizes the capabilities of each role. Only the extremes are confirmed today. Cells marked `TBD` are not yet confirmed and will be filled once the exact per-role capabilities are verified.

| Role | Use compute | View instances | Request resources | Purchase & release | Invite users | Admin |
| --- | --- | --- | --- | --- | --- | --- |
| **Super admin** | TBD | TBD | TBD | TBD | TBD | TBD |
| **Distributor** | TBD | TBD | TBD | TBD | TBD | TBD |
| **Tenant admin** | Yes | Yes | Yes | Yes | Yes | Yes |
| **Compute user** | Yes | No | No | No | No | No |

> [!WARNING]
> **Confirmed vs. pending**
> Confirmed: a Tenant admin has full control of the tenant, including buying and releasing resources and inviting users; a Compute user can consume compute only. The Super admin and Distributor rows, and any cell marked `TBD`, are still being confirmed and **should not be relied on** until this page is updated. The Admin capability for a Tenant admin is scoped to the tenant.

## Inviting users

A **Tenant admin** can invite users into the tenant through **Organization management**, so that new members can use the tenant's resources.

> [!NOTE]
> **Exact menu path pending**
> The exact menu path for inviting a user is being confirmed. Numbered steps will be added here once the path is verified.

## Notes

- Roles are configured per deployment, so the roles you see may differ from the standard set above.
- The compute-only role is documented here under the working name **Compute user**; its final published label is pending.