Roles in an enterprise

This article describes how Tabnine Enterprise Server's Authorization roles are managed.

Roles in the Tabnine system

There are three types of Tabnine roles:

Member

A member is a user that's authorized to use Tabnine within your organization. To become a team member, a user must be part of one of Tabnine's teams defined in your organization.

A user can join one of the Tabnine teams by accepting an invitation that's generated via email invitation or invitation link.

Manager

The manager role was introduced in version 5.8.0.

A manager (or Account Manager) is a team member who can manage teams and users but cannot configure or set up the account.

In addition to being a team member who can use Tabnine, the manager can perform the following actions in the management console UI:

• View Tabnine team members inside the Admin Console.

• Invite users to join Tabnine (as members or managers).

• Deactivate or remove users (except for Admins).

• Create new teams.

• View the usage report.

• Extract usage reports.

• Configure the workspace settings.

A manager cannot invite, remove, or perform any operation on a user with an Admin role.

Admin

An Admin (or Account Admin) is a team member who has all the privileges of a manager but can also have all the privileges of configuring and setting up the account.

In addition to all the privileges of an account manager, the Admin can perform the following actions:

• Invite or assign other Admins to the team.

• Deactivate or remove other Admins from Tabnine.

• Delete teams.

• View and configure the account settings: General, Email, License, and models.

In private installations, certain admins are designated as Installation Admins. This implicit role is automatically assigned to the initial user of the installation.

To transfer the Installation Admin role to another admin, please contact [e-mail].

Installation Admins have exclusive authority to:

• Configure and modify system-wide SMTP settings.

• Manage core system configuration parameters.

Assigning and reassigning a role to another user

Admins and managers can assign (or reassign) a role to other users.

Managers can assign a Manager or Member role.

Admins can assign Admin, Manager, or a Member role. Only Admins can reassign a role to another Admin.

Assigning a role to another user

An Admin (or a manager) can assign a role to a user when inviting a new user by email or link by setting the role in the invitation popup.

Reassigning a role to an existing user

An Admin (or a manager) can reassign the role of another existing user using the role dropdown on the User Management page.