GitLab CI - Permissions


Advertisements

User Permissions

The following table shows available user permissions levels for different types of users in a project −

S.N. Guest Reporter Developer Master Owner
1 Creates a new issue Creates a new issue Creates a new issue Creates a new issue Creates a new issue
2 Can leave comments Can leave comments Can leave comments Can leave comments Can leave comments
3 Able to write on project wall Able to write on project wall Able to write on project wall Able to write on project wall Able to write on project wall
4 - Able to pull project code Able to pull project code Able to pull project code Able to pull project code
5 - Can download project Can download project Can download project Can download project
6 - Able to write code snippets Able to write code snippets Able to write code snippets Able to write code snippets
7 - - Create new merge request Create new merge request Create new merge request
8 - - Create new branch Create new branch Create new branch
9 - - Push and remove non protected branches Push and remove non protected branches Push and remove non protected branches
10 - - Includes tags Includes tags Includes tags
11 - - Can create, edit, delete project milestones Can create, edit, delete project milestones Can create, edit, delete project milestones
12 - - Can create or update commit status Can create or update commit status Can create or update commit status
13 - - Write a wiki Write a wiki Write a wiki
14 - - Create new environments Create new environments Create new environments
15 - - Cancel and retry the jobs Cancel and retry the jobs Cancel and retry the jobs
16 - - Updates and removes the registry image Updates and removes the registry image Updates and removes the registry image
17 - - - Can add new team members Can add new team members
18 - - - Push and remove protected branches -
19 - - - Can edit the project Can edit the project
20 - - - Can manage runners, job triggers and variables Can manage runners, job triggers and variables
21 - - - Add deploy keys to project Add deploy keys to project
22 - - - Able to manage clusters Able to manage clusters
23 - - - Configure project hooks Configure project hooks
24 - - - Can enable/disable the branch protection Can enable/disable the branch protection
25 - - - Able to rewrite or remove Git tags Able to rewrite or remove Git tags

The following table shows available group members permissions levels in a group −

S.N. Guest Reporter Developer MasterOwner
1 Browse group Browse group Browse group Browse group Browse group
2 - - - - Edit group
3 - - - - Create subgroup
4 - - - Create project in group Create project in group
5 - - - - Manage group members
6 - - - - Remove group
7 - Manage group labels Manage group labels Manage group labels Manage group labels
8 - - Create/edit/delete group milestones Create/edit/delete group milestones Create/edit/delete group milestones
9 - View private group epic View private group epic View private group epic View private group epic
10 - - - - -
11 View internal group epic View internal group epic View internal group epic View internal group epic View internal group epic
12 View public group epic View public group epic View public group epic View public group epic View public group epic
13 - Create/edit group epic Create/edit group epic Create/edit group epic Create/edit group epic
14 - - - - Delete group epic
15 - - - - View group Audit Events

The following table shows available GitLab CI/CD permissions in the GitLab −

S.N. Guest/Reporter Developer Master Admin
1 Can see commits and jobs Can see commits and jobs Can see commits and jobs Can see commits and jobs
2 Retry or cancel job Retry or cancel job Retry or cancel job
3 - Deletes job artifacts and trace Deletes job artifacts and trace Deletes job artifacts and trace
4 - - Remove project Remove project
5 - - Create project Create project
6 - - Change project configuration Change project configuration
7 - - Add specific runners Add specific runners
8 - - - Add shared runners
9 - - - Can able to see events in the system
10 - - - Admin interface

Job Permissions

The following table shows job permissions in the GitLab −

S.N. Guest/Reporter Developer Master Admin
1 - Run CI job Run CI job Run CI job
2 - Clone source and LFS from current project Clone source and LFS from current project Clone source and LFS from current project
3 - Clone source and LFS from public projects Clone source and LFS from public projects Clone source and LFS from public projects
4 - Clone source and LFS from internal projects Clone source and LFS from internal projects Clone source and LFS from internal projects
5 - Clone source and LFS from private projects Clone source and LFS from private projects Clone source and LFS from private projects
6 - Push source and LFS Push source and LFS Push source and LFS
7 - Pull container images from current project Pull container images from current project Pull container images from current project
8 - Pull container images from public projects Pull container images from public projects Pull container images from public projects
9 - Pull container images from internal projects Pull container images from internal projects Pull container images from internal projects
10 - Pull container images from private projects Pull container images from private projects Pull container images from private projects
11 - Push container images to current project Push container images to current project Push container images to current project
12 - Push container images to other projects Push container images to other projects Push container images to other projects

Note − LFS stands for Large File Storage which is a Git extension that exchanges the large files such as audio, video, graphics with tiny pointers files in your repository.

Advertisements