16.2 Project Permissions

Orbnetes deployment and release orchestration documentation for operators and platform teams.

Project permissions control what a user can do inside a specific project.

Typical project permission domains:

  • blueprints management,
  • release creation/execution,
  • pipeline operations (stop/rerun),
  • approvals actions,
  • release sources management,
  • project secrets/variables management,
  • environments management,
  • release storage management,
  • agent operations (within project scope behavior).

Key principle:

  • project membership grants visibility scope,
  • project permissions grant action capability.

Operational guidance:

  • assign permissions by responsibility, not by convenience.
  • split deploy authority from config authority when risk profile is high.
  • review project permissions periodically for drift.