Docker roles and permissions
This document describes the permission levels each RBAC role has within the Portainer application for both Docker Standalone and Docker Swarm environments. Refer to the linked notes for further requirements on each operation.
Role-Based Access Control is only available in Portainer Business Edition.
Abbreviation | Role name |
|---|---|
EA | Environment Administrator |
OP | Operator |
HD | Helpdesk |
ST | Standard user |
RO | Read-only user |
These operations are only relevant for Docker Swarm environments.
Operation | EA | OP | HD | ST | RO | Notes |
|---|---|---|---|---|---|---|
View containers | ||||||
Create container | ||||||
Build an image from a container | ||||||
View container details | ||||||
Start container | ||||||
Stop container | ||||||
Kill container | ||||||
Restart container | ||||||
Pause container | ||||||
Resume container | ||||||
Edit container | ||||||
Duplicate container | ||||||
Recreate container | ||||||
Container console | ||||||
Container attach | ||||||
Join container to network | ||||||
Remove container from network | ||||||
View container logs | ||||||
Change container ownership | ||||||
Delete container |
Operation | EA | OP | HD | ST | RO | Notes |
|---|---|---|---|---|---|---|
View images | | |||||
Pull an image | | |||||
Push an image | | |||||
Build an image | | |||||
Import an image | | |||||
View image details | | |||||
Add tag to image | | |||||
Remove tag from image | | |||||
Export image | | |||||
Delete an image | |
These operations are only relevant for Docker Standalone environments.
Operation | EA | OP | HD | ST | RO | Notes |
|---|---|---|---|---|---|---|
View events | |
These operations are only relevant for Docker Swarm environments.
These operations are only relevant for Docker Swarm environments.
These operations are only relevant for Docker Standalone environments.
Operation | EA | OP | HD | ST | RO | Notes |
|---|---|---|---|---|---|---|
View host details | |
These operations are only relevant for Docker Swarm environments.