Understanding User Roles in TestGrid

Modified on Wed, Jun 17 at 2:05 PM

Overview

TestGrid uses Role-Based Access Control (RBAC) to ensure users have the appropriate permissions and access levels based on their responsibilities. Proper role management helps organizations maintain security, streamline operations, and efficiently manage teams, devices, and testing resources.

The platform includes five user roles:

Company Admin
Cloud Admin
Team Admin
Team User
Service Account

Company Admin

The Company Admin is the highest-level administrative role within an organization and has complete access to the TestGrid platform.

Responsibilities

User Management

Create, edit, and delete users.
Create Cloud Admin, Team Admin, and Team User accounts.

Team and Device Management

Create teams.
Create device groups.
Assign devices to teams and users.
Manage device access permissions.

Device Access

Has access to all devices by default.
Can assign devices to users and teams.

Reservation Management

Can approve or reject device reservation requests made by Team Admins and Team Users.

Administrative Control

Can create multiple Cloud Admins, Team Admins, and Team Users.
Has full control over organizational settings and resources.

Cloud Admin

Cloud Admins have nearly the same permissions as Company Admins.

Responsibilities

User Management

Create, edit, and delete users.
Create Team Admin and Team User accounts.

Team and Device Management

Create teams and device groups.
Assign devices and permissions.
Manage testing resources.

Key Limitation

Cloud Admins cannot create Company Admin accounts.

Apart from this restriction, Cloud Admins have the same administrative capabilities as Company Admins.

Team Admin

Team Admins manage users and resources within their assigned team.

Responsibilities

Manage team members.
Remove users from their team.
Access devices assigned to their team.

Device Access

Can access only the devices assigned to their team.

Team User

Team Users are standard platform users with limited administrative privileges.

Responsibilities

Execute testing activities.
Access assigned projects and resources.
Use TestGrid features based on granted permissions.

Device Access

Can access only the devices assigned to their team.

Limitations

Cannot manage users.
Cannot manage teams.
Cannot modify administrative settings.

Service Account

A Service Account is a dedicated account used for automated testing and CI/CD integrations.

Purpose

Service Accounts are designed to run automation workflows without relying on an individual user's account.

Common Use Cases

CI/CD pipeline execution.
Scheduled automation runs.
Continuous testing workflows.
Integration with external tools and systems.

Key Characteristics

Created and managed by Company Admins.
Intended for automated processes rather than human users.
Does not require Single Sign-On (SSO) authentication.
Supports uninterrupted automation execution.

Outcome

By using TestGrid's role-based access model, organizations can securely manage users, teams, devices, and testing resources while ensuring each user has the appropriate level of access required to perform their responsibilities effectively.