Permissions

Manage user roles and permissions within Dokploy. Dokploy handles three distinct roles with different levels of access and capabilities.

Roles

Dokploy supports three roles for managing user access:

Owner

The Owner is the creator of the organization and has the highest level of access:

• Full administrative privileges
• Can perform all actions that admins can do
• Can delete and edit the role of admins
• Intransferable: The owner role cannot be transferred to another user
• Only one owner exists per organization

Admin

Admin users have extensive administrative capabilities:

• Can perform all actions that the owner can do
• Full access to all features and settings
• Limitations: Cannot delete or edit the role of other admins
• Limitations: Cannot delete or edit the role of the owner

Members

Members are regular users who have access based on the permissions assigned to them. Members can be granted specific permissions to manage applications and services.

Permissions

The following permissions are available for Members to manage your users effectively:

• Create Projects: Allow the user to create projects.
• Delete Projects: Allow the user to delete projects.
• Create Services: Allow the user to create services.
• Delete Services: Allow the user to delete services.
• Create Environments: Allow the user to create environments.
• Delete Environments: Allow the user to delete environments.
• Access to Traefik Files: Allow the user to access to the Traefik Tab Files.
• Access to Docker: Allow the user to access to the Docker Tab.
• Access to API/CLI: Allow the user to access to the API/CLI.
• Access to SSH Keys: Allow to users to access to the SSH Keys section.
• Access to Git Providers: Allow to users to access to the Git Providers section.

You can also grant permissions to specific users for accessing particular projects or services.

Project Permissions

Based on your projects and services, you can assign permissions to specific users to give them access to particular projects or services. You can also select specific environments within projects, allowing you to grant granular access control at the environment level.