Simple and secure Identity and Access Management
Easily manage access to your infrastructure, keep your systems secure, and support compliance across your critical resources.
Set exact permissions for every role on your team
With new custom roles, you can create and assign roles that are specifically tailored to the exact needs of your team, reducing the risk of over-privileged accounts and improving security.
Identity and Access Management products
Teams
Teams centralize access control for collaborating users, and roles define their permissions within the team based on responsibilities, applying the principle of least privilege. With both predefined and custom roles, teams can further granularize access control.
API Tokens
API tokens let you give apps exactly the access they need, nothing more, nothing less. It’s a simple way to automate tasks, keep things secure, and make your workflows run more smoothly.
Why Identity and Access Management matters
Learn how our built-in Identity and Access Management tools help to safeguard your cloud resources.
Enhanced security
IAM gives you control over who can access what—and when—helping you stay secure by enforcing the principle of least privilege and reducing the risk of threats.
Operational efficiency
Our IAM tools automate user provisioning and access approvals, reducing manual work. They simplify onboarding and ensure users have the right permissions from day one.
Improved regulatory compliance
IAM often helps teams meet industry and government regulations (i.e. SOC 2, GDPR, and HIPAA) by providing fine-grained controls.
Explore our custom scope product documentation
Take a closer look at our documentation on how to customize your scopes on Personal Access Tokens (PATs)
Manage permissions with Role-Based Access Control
Empower teams while protecting your cloud environment.
Minimize security risks
Limit user access to essential resources only, which helps minimize unauthorized access and protect sensitive data.
Improved compliance
RBAC provides clear, auditable access controls, helping organizations to meet regulatory requirements and simplify compliance audits.
Streamlined access
Streamline permission management by assigning users to predefined roles, reducing IT workload, improving productivity, and minimizing errors.
Resources hub
Dive into the details
Explore our product documentation to read up on features, team roles, and possible modifications to your roles.
World-class support
Superior support services are designed to meet your needs, whether you are a startup, an independent software vendor (ISV), or anything in between.
Frequently asked questions
What is Role-Based Access Control Management?
Role-Based Access Control (RBAC) is a way to manage who can access what in your systems. Instead of giving permissions to individual users one by one, you instead assign roles such as “Modifier” or “Billing Viewer”. Each role then has a specific set of permissions. This method makes it easier to keep access aligned with someone’s job responsibilities and helps keep your systems secure.
What is a predefined role in role-based access control management?
A predefined role is a built-in role that comes with a set of permissions already assigned. These roles are created to match common responsibilities for team members, such as managing billing or account ownership. With predefined roles, you can quickly assign the right level of access.
What is a custom role in role-based access management?
What roles are available today within the DigitalOcean cloud console?
- Owner: The Owner role grants full administrative control over an entire team and its resources.
- Member: The Member role grants full administrative control over the resources within a team, but does not permit access to billing details or team settings.
- Modifier: The Modifier role permits users to update but does not allow them to delete resources. This role is ideal for teams who wish to protect sensitive resources from deletion while still allowing members to manage them.
- Biller: The Biller role grants full administrative control over billing related information and does not allow control over team settings.
- Billing Viewer: The Billing Viewer role permits read-only access to billing information only, giving users insight into billing details for cost analysis, transparency and governance without exposing sensitive operational controls.
- Resource Viewer: The Viewer role permits read-only access to resources, ideal for audit or compliance purposes. Users with this role will not have permission to create, update, or delete resources.
What are the ideal use cases for predefined roles?
What are the ideal use cases for custom roles?
When should I use predefined roles?
How do I apply roles through the Console and the API?
Will this capability be API-only? Or is it available in the Cloud Control Panel UI?
No. Predefined roles for RBAC are available in the Cloud Control Panel. This feature will accommodate panel-only users. It should also be available to larger, more sophisticated users of the DigitalOcean API to also use predefined roles. There is no configuration disparity between the product experiences whether a user is a panel or an API user.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.