Skip to main content

Documentation Index

Fetch the complete documentation index at: https://ona.com/docs/llms.txt

Use this file to discover all available pages before exploring further.

Available on the Enterprise plan. Contact sales to learn more.
Organization roles let you delegate administrative responsibilities without granting full organization admin access. Assign these roles to groups to give team members management capabilities over specific resource types.

​
Available roles

RoleDescription
Runners AdminFull admin access to all runners in the organization
Projects AdminFull admin access to all projects in the organization
Groups AdminFull admin access to all groups in the organization
Automations AdminFull admin access to all automations (services and tasks)

​
How it works

When you assign an organization role to a group:
  1. All group members receive admin permissions on existing resources of that type
  2. New resources automatically grant admin access to the group
  3. Removing the role revokes all related permissions
This differs from Sharing resources, which grants access to specific projects or runners one at a time.

​
Assign an organization role

Only organization admins can assign organization roles.
  1. Go to Settings → Members → Groups
  2. In the groups table, find the group you want to modify
  3. Toggle the checkbox in the corresponding role column (e.g., Runners Admin, Projects Admin)
The role is applied immediately when the checkbox is toggled. Groups table showing role checkbox columns for Runners Admin, Projects Admin, Groups Admin, and Automations Admin

​
Permissions by role

​
Runners Admin

Members of groups with this role can:
PermissionGranted
View all runners
Create runners
Update runner settings
Delete runners
Share runners with users and groups
Manage environment classes
Manage SCM and LLM integrations
Access runner logs

​
Projects Admin

Members of groups with this role can:
PermissionGranted
View all projects
Create projects
Update project settings
Delete projects
Share projects with users and groups
Manage project secrets
Configure environment classes
Manage prebuilds

​
Groups Admin

Members of groups with this role can:
PermissionGranted
View all groups
Create groups
Update group settings
Delete groups
Add and remove group members

​
Automations Admin

Members of groups with this role can:
PermissionGranted
View all automations
Create automations
Update automation settings
Delete automations
Share automations with users and groups
View all execution history

​
Use cases

DevOps team manages infrastructure: Assign Runners Admin to a “DevOps” group so they can create and configure runners without full org admin access. Team leads manage their projects: Assign Projects Admin to a “Tech Leads” group so they can manage project settings and secrets across the organization. HR manages team membership: Assign Groups Admin to an “HR” group so they can add and remove members from groups as people join or leave. Platform team manages automations: Assign Automations Admin to a “Platform” group so they can create and maintain organization-wide automations.

​
Combining roles

A group can have multiple organization roles. For example, a “Platform Engineering” group might have both Runners Admin and Automations Admin roles. When a user belongs to multiple groups with different roles, they receive the combined permissions from all their groups.

​
Next steps