Roles in an Enterprise

This article describes how Tabnine Enterprise Server's Authorization roles are managed.

Roles in the Tabnine System

There are three types of Tabnine roles:

Member

A member is a user that's authorized to use Tabnine within your organization. To become a team member, a user must be part of one of Tabnine's teams defined in your organization.

A user can join one of the Tabnine teams by accepting an invitation that's generated via email invitation or invitation link.

Team Lead

The team lead role was introduced in version 5.25.0.

The Team Lead role allows for a manager to further delegate tasks and more closely reflects the hierarchy of enterprise companies. It allows for easier user management with limited access to more advanced features and settings.

A team lead can do the following:

• View analytics of their own team

• Manage users of their own team

• Invite users to their team

• Managing team repositories (coming soon)

• Managing team guidelines (coming soon)

A team lead cannot invite, remove, or perform any operation on a user with a manager or admin role.

Manager

The manager role was introduced in version 5.8.0.

A manager (or Account Manager) is a team member who can manage teams and users but cannot configure or set up the account.

In addition to being a team member who can use Tabnine, the manager can perform the following actions in the management console UI:

• View Tabnine team members inside the Admin Console.

• Invite users to join Tabnine (as members, team leads, or managers).

• Deactivate or remove users (except for admins).

• Create new teams.

• View the usage report.

• Extract usage reports.

• Configure the workspace settings.

A manager cannot invite, remove, or perform any operation on a user with an admin role.

Admin

An Admin (or Account Admin) is a team member who has all the privileges of a manager but can also have all the privileges of configuring and setting up the account.

In addition to all the privileges of an account manager, the Admin can perform the following actions:

• Invite or assign other Admins to the team.

• Deactivate or remove other Admins from Tabnine.

• Delete teams.

• View and configure the account settings: General, Email, License, and models.

In private installations, certain admins are designated as Installation Admins. This implicit role is automatically assigned to the initial user of the installation.

To transfer the Installation Admin role to another admin, please contact [email protected].

Installation Admins have exclusive authority to:

• Configure and modify system-wide SMTP settings.

• Manage core system configuration parameters.

This table summarizes all the differences between the four roles:

Ability / Permission	Member	Team Lead	Manager	Admin
Use Tabnine within the org	✓⃝	✓⃝	✓⃝	✓⃝
View analytics	ⓧ	Own team only	All teams	All teams
Manage users	ⓧ	Own team only	Members Team Leads Managers	Members Team Leads Managers Admins
Invite users	ⓧ	Own team only	Members Team Leads Managers	Members Team Leads Managers Admins
Create/manage repositories	ⓧ	ⓧ (coming soon)	All teams	All teams
Manage guidelines	ⓧ	ⓧ (coming soon)	All teams	All teams
View usage reports	ⓧ	Own team only	✓⃝	✓⃝
Access “Teams” overview	ⓧ	ⓧ	✓⃝	✓⃝
Manage account-wide settings (Models, Jira, Provenance, etc.)	ⓧ	ⓧ	✓⃝	✓⃝
Create or delete teams	ⓧ Create ⓧ Delete	ⓧ Create ⓧ Delete	✓⃝ Create ⓧ Delete	✓⃝ Create ✓⃝ Delete
Assign roles	ⓧ	Members (own team only)	Members Team Leads Managers	Members Team Leads Managers Admins
Remove users	ⓧ	Own team only	Members Team Leads Managers	Members Team Leads Managers Admins
View or configure license/system settings	ⓧ	ⓧ	ⓧ	✓⃝
Installation-level settings (SMTP, system configs)	ⓧ	ⓧ	ⓧ	Installation Admin only

Assigning and reassigning a role to another user

Admins and managers can assign (or reassign) a role to other users.

Managers can assign a Manager, Team Lead, or Member role.

Admins can assign Admin, Manager, Team Lead, or a Member role. Only Admins can reassign a role to another Admin.

Team leads can manage roles on their own teams only.

An Admin (or a manager) can assign a role to a user when inviting a new user by email or link by setting the role in the invitation popup. The admin can also reassign that role.

To assign or reassing a role, navigate to the User Management page. In the Role column of the table, select the arrow next to the current role and a dropdown menu will appear with all four role options to select from. Choose which one you want.