---
title: "Roles and Permissions"
slug: "roles-and-permissions"
updated: 2026-07-13T03:37:38Z
published: 2026-07-13T03:37:38Z
canonical: "docs.dataloop.ai/roles-and-permissions"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dataloop.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and Permissions

## Overview

The **Roles and Permissions** page provides a comprehensive view of the different roles and permissions available in DDOE. These roles define what actions users can perform and what resources they can access across both the **organization level** and **project level**.

Permissions are designed to ensure secure access control while enabling users to perform their responsibilities effectively based on their assigned role.

Within DDOE, permissions are categorized based on:

- **Organization-level**
- **Project-level**

The following sections provide detailed information about each category:

## **Organization-Level Roles and Permissions**

Organization-level roles define permissions across the entire DDOE organization. These roles provide broader access and are typically assigned to administrators or users responsible for managing organizational resources.

Permissions at this level include:

- Managing users and roles
- Configuring integrations and system settings
- Accessing all projects within the organization
- Monitoring platform usage and governance

Organization-level permissions ensure **centralized control and governance** across all projects and resources.

[Learn more](/1-3-8/docs/organization-overview) about the organization.

### Organization Roles

Members typically refers to the users who belong to or are affiliated with the organization. Members of an organization can have one of the following roles:

| Owner ⭐️⭐️⭐️⭐️ | The users who own an organization. An owner can rename an organization, create projects, and add or remove organization members. |
| --- | --- |
| Admin ⭐️⭐️⭐️☆ | An admin-user can rename an organization, create projects, and add or remove organization members. |
| Member ⭐️⭐️☆☆ | A member-user of an organization can open new projects and view the organization's members. Members **cannot** add or remove other members or delete the organization. |
| Worker ⭐️☆☆☆ | A worker-user can add users with no permissions to the organization itself. Accordingly, workers cannot view the list of organization members, access any secrets or open new projects. |

**Important**

- The creator (owner) of an organization has the ability to add new owners, but it is not possible to remove the organization creator.
- Members' roles are defined when adding them to the organization, but you can change them later on by an Organization Owner/Admin.
- The Org role doesn't change the project role. You will still need to adjust their project roles as a separate step. For example, an Org Worker can still be added to a project with Owner, Developer, or Annotation Manager roles.
- The Organization **Worker** role has specific restrictions including no access to the Data tab, inability to create new projects, and no permissions to manage tasks or labeling work for other team members.

### Feature Actions Based on Org Roles

The following table details the action permissions granted to the organization roles in the DDOE platform. As you can view, the **Worker** role is not allowed to perform any organization-level operations, while the organization **Owner** is allowed to perform all.

| Action/Role | Owner | Admin | Member | Worker |
| --- | --- | --- | --- | --- |
| Create a project | ✅ | ✅ | ✅ | 🚫 |
| View secret | ✅ | ✅ | ✅ | 🚫 |
| View integration | ✅ | ✅ | ✅ | 🚫 |
| Add ORG members | ✅ | ✅ | ✅ | 🚫 |
| List organizations projects | ✅ | ✅ | 🚫 | 🚫 |
| Change members role | ✅ | ✅ | 🚫 | 🚫 |
| Delete members | ✅ | ✅ | 🚫 | 🚫 |
| Claim ownership over projects | ✅ | ✅ | 🚫 | 🚫 |
| Create a group | ✅ | ✅ | 🚫 | 🚫 |
| Update a group | ✅ | ✅ | 🚫 | 🚫 |
| Delete a group | ✅ | ✅ | 🚫 | 🚫 |
| Create integration | ✅ | ✅ | 🚫 | 🚫 |
| Delete integration | ✅ | ✅ | 🚫 | 🚫 |
| Update integration | ✅ | ✅ | 🚫 | 🚫 |
| Create secret | ✅ | ✅ | 🚫 | 🚫 |
| Delete secret | ✅ | ✅ | 🚫 | 🚫 |
| Update secret | ✅ | ✅ | 🚫 | 🚫 |
| Set a project under the organization | ✅ | 🚫 | 🚫 | 🚫 |
| Delete inactive project users | ✅ | 🚫 | 🚫 | 🚫 |

### Feature Menus Based on Org Roles

| DDOE Feature (Menu Pages) | Project Owner | Admin | Member | Worker |
| --- | --- | --- | --- | --- |
| My Projects | ✅ | ✅ | ✅ | ✅ |
| Dashboard | ✅ | ✅ | ✅ | ✅ |
| Marketplace | ✅ | ✅ | ✅ | ✅ |
| Data | ✅ | ✅ | ✅ | ✅ |
| Ontology | ✅ | ✅ | ✅ | ✅ |
| Human Tasks / Assignments | ✅ | ✅ | ✅ | ✅ A Worker can only access the “Human Tasks / Assignments” menu page |
| CloudOps | ✅ | ✅ | ✅ | ✅ |
| Pipelines | ✅ | ✅ | ✅ | ✅ |
| Models | ✅ | ✅ | ✅ | ✅ |
| Team | ✅ | ✅ | ✅ | ✅ |
| Analytics | ✅ | ✅ | ✅ | ✅ |
| Members & Groups | ✅ | ✅ | ✅ | 🚫 |
| Getting Started | ✅ | ✅ | ✅ | 🚫 |
| Organization Projects | ✅ | ✅ | 🚫 | 🚫 |
| Audit Logs | ✅ | ✅ | 🚫 | 🚫 |
| Data Governance | ✅ | ✅ | 🚫 | 🚫 |
| Account | ✅ | ✅ | 🚫 | 🚫 |
| Quick Search | ✅ | ✅ | ✅ | 🚫 |

---

## **Project-Level Roles and Permissions**

Project-level roles define the permissions assigned to users within a specific project. These roles control actions such as:

- Creating and managing datasets
- Performing annotations
- Running pipelines and tasks
- Accessing project-specific resources

Permissions at this level are **limited to the scope of the project**, ensuring that users can only interact with resources relevant to their assigned projects.

[Learn more](/1-3-8/docs/project-team) about the project.

### Project Roles

Roles are predefined permissions assigned to users or groups. These roles streamline permission management. Available roles include:

| Project Owner ⭐️⭐️⭐️⭐️ | Full permissions to manage projects, datasets, storage drivers, assign users, change roles, export data, etc. |
| --- | --- |
| Developer ⭐️⭐️⭐️☆ | Manage datasets, storage drivers, set recipes, create tasks, export data. |
| **Annotation Manager** ⭐️⭐️**☆☆** | Create annotations or QA tasks, assign/reassign tasks, review, and view datasets. |
| **Annotator** ⭐️**☆☆☆** | Perform annotation and QA assignments. |

### Feature Actions Based on Project Roles

| Action/Role | Project Owner | Developer | Annotation Manager | Annotator |
| --- | --- | --- | --- | --- |
| Create annotation | ✅ | ✅ | ✅ | ✅ |
| Delete annotation | ✅ | ✅ | ✅ | ✅ |
| Edit annotation | ✅ | ✅ | ✅ | ✅ |
| Open an issue | ✅ | ✅ | ✅ | ✅ Only on QA tasks. |
| Export Annotations | ✅ | ✅ | ✅ | ✅ |
| Import Annotations | ✅ | ✅ | ✅ | ✅ |
| Export Mask | ✅ | ✅ | ✅ | ✅ |
| Create a task | ✅ | ✅ | ✅ | 🚫 |
| Approve an issue | ✅ | ✅ | ✅ | 🚫 |
| Add users | ✅ | ✅ | ✅ | 🚫 |
| Edit users | ✅ | ✅ | ✅ | 🚫 |
| Delete users | ✅ | ✅ | ✅ | 🚫 |
| Changing role | ✅ | ✅ | ✅ | 🚫 |
| Delete a task | ✅ | ✅ | ✅ Only the tasks are created by the same user. | 🚫 |
| View Pipelines | ✅ | ✅ | ✅ | 🚫 |
| View Datasets | ✅ | ✅ | ✅ | 🚫 |
| Create Recipes | ✅ | ✅ | 🚫 | 🚫 |
| Update Recipes | ✅ | ✅ | 🚫 | 🚫 |
| Delete Recipes | ✅ | ✅ | 🚫 | 🚫 |
| Clone Recipes | ✅ | ✅ | 🚫 | 🚫 |
| Rename a task | ✅ | ✅ | 🚫 | 🚫 |
| Upload an item | ✅ | ✅ | 🚫 | 🚫 |
| Rename an item | ✅ | ✅ | 🚫 | 🚫 |
| Delete an item | ✅ | ✅ | 🚫 | 🚫 |
| Move an Item | ✅ | ✅ | 🚫 | 🚫 |
| Create a folder | ✅ | ✅ | 🚫 | 🚫 |
| Delete a folder | ✅ | ✅ | 🚫 | 🚫 |
| Rename a folder | ✅ | ✅ | 🚫 | 🚫 |
| Move a folder | ✅ | ✅ | 🚫 | 🚫 |
| Create a dataset | ✅ | ✅ | 🚫 | 🚫 |
| Delete a dataset | ✅ | ✅ | 🚫 | 🚫 |
| Rename a dataset | ✅ | ✅ | 🚫 | 🚫 |
| Edit labels | ✅ | ✅ | 🚫 | 🚫 |
| Rename a Project | ✅ | ✅ | 🚫 | 🚫 |
| Install/uninstall pipelines | ✅ | ✅ | 🚫 | 🚫 |
| Create Pipelines | ✅ | ✅ | 🚫 | 🚫 |
| Edit Pipelines | ✅ | ✅ | 🚫 | 🚫 |
| View Storage Drivers | ✅ | ✅ | 🚫 | 🚫 |
| Create Storage Drivers | ✅ | ✅ | 🚫 | 🚫 |
| Update Storage Drivers | ✅ | ✅ | 🚫 | 🚫 |
| Delete Storage Drivers | ✅ | ✅ | 🚫 | 🚫 |
| Create Datasets | ✅ | ✅ | 🚫 | 🚫 |
| Update Datasets | ✅ | ✅ | 🚫 | 🚫 |
| Download Items | ✅ | ✅ | 🚫 | 🚫 |
| Add labeling company | ✅ | 🚫 | 🚫 | 🚫 |
| Delete a Project | ✅ | 🚫 | 🚫 | 🚫 |

### Feature Menus Based on Project Roles

| Feature | Project Owner | Developer | Annotation Manager | Annotator |
| --- | --- | --- | --- | --- |
| My Projects | ✅ | ✅ | ✅ | ✅ |
| Dashboard | ✅ | ✅ | ✅ | 🚫 |
| Marketplace | ✅ | ✅ | 🚫 | 🚫 |
| Data | ✅ | ✅ | ✅ | 🚫 |
| Ontology | ✅ | ✅ | 🚫 | 🚫 |
| Human Tasks / Assignments | ✅ | ✅ | ✅ | ✅ |
| CloudOps | ✅ | ✅ | 🚫 | 🚫 |
| Pipelines | ✅ | ✅ | ✅ | 🚫 |
| Models | ✅ | ✅ | 🚫 | 🚫 |
| Team | ✅ | ✅ | ✅ | 🚫 |
| Analytics | ✅ | ✅ | ✅ | 🚫 |
| Organization Projects | ✅ | ✅ | ✅ | ✅ |
| Audit Logs | ✅ | ✅ | ✅ | ✅ |
| Members & Groups | ✅ | ✅ | ✅ | ✅ |
| Integrations | ✅ | ✅ | ✅ | ✅ |
| Account | ✅ | ✅ | ✅ | ✅ |
| Quick Search | ✅ | ✅ | ✅ | 🚫 |