Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions tidb-cloud/premium/manage-user-access-premium.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ For example, you can do the following:

### TiDB instances

If you are an `Instance Administrator`, you can manage settings and operations for a specific instance.
If you are an `Instance Manager`, you can manage settings and operations for a specific TiDB instance.

For example, you can do the following:

Expand All @@ -67,7 +67,7 @@ At the organization level, TiDB Cloud defines the following roles, in which `Org
|---|---|---|---|---|---|
| Manage organization settings, such as TiDB instances, API keys, and time zones. | ✅ | ❌ | ❌ | ❌ | ❌ |
| Add or remove organization members, and edit organization roles. | ✅ | ❌ | ❌ | ❌ | ❌ |
| `Instance Administrator` permissions for all TiDB instances in the organization. | ✅ | ❌ | ❌ | ❌ | ❌ |
| `Instance Manager` permissions for all TiDB instances in the organization. | ✅ | ❌ | ❌ | ❌ | ❌ |
| Manage payment information for the organization. | ✅ | ✅ | ❌ | ❌ | ❌ |
| View billing and use [Cost Explorer](/tidb-cloud/tidb-cloud-billing.md#cost-explorer). | ✅ | ✅ | ✅ | ❌ | ❌ |
| Manage [console audit logging](/tidb-cloud/tidb-cloud-console-auditing.md) for the organization. | ✅ | ❌ | ❌ | ✅ | ❌ |
Expand All @@ -80,15 +80,15 @@ At the organization level, TiDB Cloud defines the following roles, in which `Org

### TiDB instance roles

At the TiDB instance level, TiDB Cloud defines two roles: `Instance Administrator` and `Instance Viewer`.
At the TiDB instance level, TiDB Cloud defines two roles: `Instance Manager` and `Instance Viewer`.

> **Note:**
>
> - The `Organization Owner` automatically inherits all `Instance Administrator` permissions for every instance in the organization.
> - The `Organization Owner` automatically inherits all `Instance Manager` permissions for every instance in the organization.
> - Each TiDB instance role inherits all the permissions of the `Organization Viewer` role by default.
> - If a member in your organization does not have any TiDB instance roles, the member cannot access any TiDB instances in your organization.

| Permission | `Instance Administrator` | `Instance Viewer` |
| Permission | `Instance Manager` | `Instance Viewer` |
|---|---|---|
| Manage TiDB instance settings | ✅ | ❌ |
| Manage [database audit logging](/tidb-cloud/tidb-cloud-auditing.md) of the TiDB instance. | ✅ | ❌ |
Expand Down
2 changes: 1 addition & 1 deletion tidb-cloud/premium/set-up-sink-private-endpoint-premium.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ This document describes how to create a private endpoint for changefeeds in your
Only users with any of the following roles in your organization can create private endpoints for changefeeds:

- `Organization Owner`
- `Instance Administrator` for the corresponding instance
- `Instance Manager` for the corresponding instance

For more information about roles in TiDB Cloud, see [User roles](/tidb-cloud/premium/manage-user-access-premium.md#user-roles).

Expand Down