Configure access

By default, users do not have access to Resource Management, with the exception of project usage. Access is managed through Control Panel enrollment permissions and workspaces, and both must be configured for a user to have access.

There are two roles in enrollment permissions that control access to Resource Management: Resource management viewer and Resource management administrator.

• Resource management viewer allows users to view usage and resource allocation.
• Resource management administrator additionally allows users to change resource allocation by creating Resource Queues and allocating projects to usage accounts.

For more details on the associated workflows, view details on the roles in Control Panel. A user needs to have one of these roles in order to view usage data in Resource Management.

Viewing Foundry usage and limits also requires the Read usage metrics operation, with identifier limitsservice:read-usage-metrics. This operation is granted by default through the following roles:

• At the enrollment level: Resource management viewer (enrollment:resource-management-viewer)
• At the organization level: Organization administrator (organization:administrator)

The Foundry usage & limits page is hidden when a user does not have this operation.

Resource Management is part of the Support workspace in the Application access page of Control Panel. A user must have access to the Resource management application in this workspace to successfully view or use the application.

Project usage

Access to the Project usage page is governed by the security operation "View project usage in Resource Management", with identifier usage-aggregator:view-project-usage.

By default, this operation is granted to users with the Owner role on the project, but administrators can configure access by managing roles in Foundry Settings.