Roles

Oracle Developer Cloud Service (DevCS) has two types of roles, Identity Domain and Project. These roles allow their grantees to control aspects of the service or projects, or both.

Identity Domain Roles

Those who have an Oracle Cloud identity domain role control which users can sign into an Oracle Cloud service and what features they can access.

To find out how to grant an identity domain role to someone, see Learn About Cloud Account Roles and Add Users and Assign Roles in Getting Started with Oracle Cloud.

There’re several types of identity domain roles, each of which has different privileges:

This role...	Enables a user to:
TenantAdminGroup (Identity Domain Administrator)	Add and manage users and their roles in the identity domain. By default, the role is assigned to the service subscriber who can assign the role to other users.
DEVCS_APP_ENTITLEMENT_ADMINISTRATOR (Administrator Role for Developer Cloud Service Provisioning)	Create a DevCS instance in an identity domain.
DEVELOPER_ADMINISTRATOR (Developer Service Administrator)	Update the organization details of DevCS. The user with this role is also called as the Organization Administrator. The role is available after a DevCS instance is created. By default, the role is assigned to the service subscriber who can assign the role to other users.
DEVELOPER_USER (Developer Service User)	Create and access DevCS projects. All users of DevCS must be assigned this role. The role is available after a DevCS instance is created. Note that this role doesn't allow the user to update the organization details.

Additional Roles

To access other Oracle Cloud services from DevCS, these roles should be assigned to the appropriate users:

This role...	Enables a user to:
JaaS_Administrator (Java Administrators)	Connect to Oracle Java Cloud Service and Oracle Java Cloud Service - SaaS Extension and deploy build artifacts.
APaaS_Administrator (APaaS Administrator)	Connect to Oracle Application Container Cloud Service and deploy build artifacts.
OCI_Administrator (OCI Administrator)	Create and manage OCI compartments and its resources.
Compute.Compute_Operations (Service Administrator)	Create and manage DevCS VMs on Oracle Cloud Infrastructure Compute Classic.
Storage.Storage_Administrator (Service Administrator)	Create and manage containers, and export to and import project data from Oracle Cloud Infrastructure Object Storage Classic.

Project Roles

To take part in a project, the user must be a project member.

This role...	Enables a user to:
Organization Administrator	Access and manage all projects of the organization, and set connections to OCI and OCI Classic. In this documentation, the icon indicates the organization administrator. Usually, organization heads and members of the IT department are assigned this role. The creator of the service instance is automatically assigned this role.
Owner	Access all components of the project. An owner can perform project management and administrative tasks such as add or remove Git repositories, manage project users, assign default reviewers, configure Webhooks, and manage ATOM/RSS Feeds handlers. In this documentation, the icon indicates a project owner. Usually, project managers and team leaders are assigned this role. The creator of the project is automatically assigned this role.
Member	Access most components of the project, but restricts project management or administrative actions. In this documentation, the icon indicates a project member. Usually, developers, QA, technical writers, and other members are assigned this role.
Non-member	View components of a shared project, but can’t update source code files, can’t create or configure build jobs and deployment configurations, and can’t manage the project. The user can enter comments, update issues, view wikis, and download build artifacts.