[{"data":1,"prerenderedAt":307},["ShallowReactive",2],{"docs-navigation":3,"\u002Fdocs\u002Fsaving\u002Fresources\u002Froles":107},[4],{"title":5,"section":6,"to":7,"groups":8},"MilkStraw Saving","\u002Fdocs\u002Fsaving","\u002Fdocs\u002Fsaving\u002Fget-started\u002Fintroduction",[9,26,45,68,92],{"title":10,"links":11},"Get started",[12,14,18,22],{"title":13,"to":7},"Overview",{"title":15,"to":16,"icon":17},"How MilkStraw AI works","\u002Fdocs\u002Fsaving\u002Fget-started\u002Fhow-milkstraw-ai-works","IconLightBulb",{"title":19,"to":20,"icon":21},"Quickstart","\u002Fdocs\u002Fsaving\u002Fget-started\u002Fquickstart","IconPlugin1",{"title":23,"to":24,"icon":25},"Activate and track savings","\u002Fdocs\u002Fsaving\u002Fget-started\u002Factivate-savings","IconLightningBolt",{"title":27,"links":28},"Use MilkStraw AI",[29,33,37,41],{"title":30,"to":31,"icon":32},"Projects and findings","\u002Fdocs\u002Fsaving\u002Fuse-milkstraw-ai\u002Fprojects-and-findings","IconSquareChecklist",{"title":34,"to":35,"icon":36},"Spend","\u002Fdocs\u002Fsaving\u002Fuse-milkstraw-ai\u002Fspend","IconLineChart1",{"title":38,"to":39,"icon":40},"Milkman","\u002Fdocs\u002Fsaving\u002Fuse-milkstraw-ai\u002Fmilkman","IconChatBubbles",{"title":42,"to":43,"icon":44},"MilkStraw CLI","\u002Fdocs\u002Fsaving\u002Fuse-milkstraw-ai\u002Fcli","IconConsole",{"title":46,"links":47},"Upgrade guides",[48,52,56,60,64],{"title":49,"to":50,"icon":51},"Guides overview","\u002Fdocs\u002Fsaving\u002Fupgrade-guides\u002Foverview","IconBook",{"title":53,"to":54,"icon":55},"Amazon EKS","\u002Fdocs\u002Fsaving\u002Fupgrade-guides\u002Fupgrade-eks-instance-types","IconArrowUpCircle",{"title":57,"to":58,"icon":59},"Amazon EC2 Auto Scaling","\u002Fdocs\u002Fsaving\u002Fupgrade-guides\u002Fupgrade-asg-instance-types","IconBuildingBlocks",{"title":61,"to":62,"icon":63},"Amazon EBS gp2 to gp3","\u002Fdocs\u002Fsaving\u002Fupgrade-guides\u002Fupgrade-ebs-gp2-to-gp3","IconServer1",{"title":65,"to":66,"icon":67},"AWS Elastic Beanstalk","\u002Fdocs\u002Fsaving\u002Fupgrade-guides\u002Fupgrade-elastic-beanstalk-instance-types","IconGrowth",{"title":69,"links":70},"Resources",[71,75,79,82,85,89],{"title":72,"to":73,"icon":74},"Supported services","\u002Fdocs\u002Fsaving\u002Fresources\u002Fsupported-services","IconServer",{"title":76,"to":77,"icon":78},"Security","\u002Fdocs\u002Fsaving\u002Fresources\u002Fsecurity","IconShield",{"title":80,"to":81},"Permissions","\u002Fdocs\u002Fsaving\u002Fresources\u002Fpermissions",{"title":83,"to":84},"Roles","\u002Fdocs\u002Fsaving\u002Fresources\u002Froles",{"title":86,"to":87,"icon":88},"Billing","\u002Fdocs\u002Fsaving\u002Fresources\u002Fbilling","IconBanknote2",{"title":90,"to":91},"Cancellation","\u002Fdocs\u002Fsaving\u002Fresources\u002Fcancellation",{"title":93,"links":94},"Get help",[95,99,103],{"title":96,"to":97,"icon":98},"FAQ","\u002Fdocs\u002Fsaving\u002Fget-help\u002Ffaq","IconCircleQuestionmark",{"title":100,"to":101,"icon":102},"Troubleshooting","\u002Fdocs\u002Fsaving\u002Fget-help\u002Ftroubleshooting","IconHammer",{"title":104,"to":105,"icon":106},"Contact & support","\u002Fdocs\u002Fsaving\u002Fget-help\u002Fcontact","IconSupport",{"path":84,"data":108,"meta":110,"nodes":151},{"title":83,"description":109},"Understand the roles you can assign to members of your organization and what each role is allowed to do.",{"toc":111,"key":143,"source":144,"stem":145,"extension":146,"kind":147,"type":148,"partial":149,"hash":150},{"title":112,"searchDepth":113,"depth":113,"links":114},"",2,[115,118,134,137,140],{"id":116,"depth":113,"text":117},"available-roles","Available roles",{"id":119,"depth":113,"text":120,"children":121},"permissions-by-role","Permissions by role",[122,126,128,131],{"id":123,"depth":124,"text":125},"permissions-by-role-engineer",3,"Engineer",{"id":127,"depth":124,"text":86},"permissions-by-role-billing",{"id":129,"depth":124,"text":130},"permissions-by-role-admin","Admin",{"id":132,"depth":124,"text":133},"permissions-by-role-owner","Owner",{"id":135,"depth":113,"text":136},"ownership","Ownership",{"id":138,"depth":113,"text":139},"changing-a-members-role","Changing a member's role",{"id":141,"depth":113,"text":142},"related","Related","docs\u002F2.saving\u002F4.resources\u002F4.roles.md","docs","2.saving\u002F4.resources\u002F4.roles",".md","document","text\u002Fmarkdown",false,"bfc32b574bbce851",[152,156,159,184,186,189,192,203,205,219,221,244,246,257,266,268,271,273,276,291,294,296],[153,154,155],"p",{},"MilkStraw AI uses role-based access control to determine what each member of your organization can see and do. Every member has exactly one role, which is assigned when they are invited and can be changed later by a manager.",[157,158,117],"h2",{"id":116},[160,161,162,169,174,179],"ul",{},[163,164,165,168],"li",{},[166,167,125],"strong",{},": Can act on project tasks and manage technical resources.",[163,170,171,173],{},[166,172,86],{},": Can view spend and savings, and manage billing, payment methods, and coupons.",[163,175,176,178],{},[166,177,130],{},": Can manage organization settings, members, and integrations.",[163,180,181,183],{},[166,182,133],{},": Full control of the organization, including deletion and ownership transfer. Each organization has exactly one owner.",[157,185,120],{"id":119},[153,187,188],{},"Roles are cumulative in scope but distinct in purpose. Each role below lists what its members can do.",[190,191,125],"h3",{"id":123},[160,193,194,197,200],{},[163,195,196],{},"View organization data",[163,198,199],{},"Act on project tasks",[163,201,202],{},"Activate savings",[190,204,86],{"id":127},[160,206,207,210,213,216],{},[163,208,209],{},"View the Spend and Savings pages",[163,211,212],{},"View billing and invoices",[163,214,215],{},"Update payment method",[163,217,218],{},"Redeem coupons",[190,220,130],{"id":129},[160,222,223,225,227,229,231,233,235,238,241],{},[163,224,196],{},[163,226,199],{},[163,228,202],{},[163,230,212],{},[163,232,215],{},[163,234,218],{},[163,236,237],{},"Manage members and invitations",[163,239,240],{},"Manage integrations",[163,242,243],{},"Update organization settings",[190,245,133],{"id":132},[160,247,248,251,254],{},[163,249,250],{},"All Admin permissions",[163,252,253],{},"Transfer ownership",[163,255,256],{},"Delete organization",[258,259,261,262,265],"callout",{"type":260},"note","Billing members can’t open the Overview, Inventory, or Accounts pages, and can’t use the ",[263,264,42],"a",{"href":43},".",[157,267,136],{"id":135},[153,269,270],{},"Every organization has exactly one owner. Only the owner can transfer ownership to another member or delete the organization. Ownership moves in one step. An admin cannot demote the owner or leave the organization without an owner.",[157,272,139],{"id":138},[153,274,275],{},"Admins and owners can change roles from the members page in your organization settings. To change roles:",[277,278,279,282,288],"ol",{},[163,280,281],{},"Open your organization settings.",[163,283,284,285,265],{},"Go to ",[166,286,287],{},"Members",[163,289,290],{},"Select a member and choose a new role from the dropdown.",[258,292,293],{"type":260},"Any member except the owner can leave an organization. The owner must transfer ownership first. Only admins and owners can remove other members.",[157,295,142],{"id":141},[160,297,298,302],{},[163,299,300],{},[263,301,86],{"href":87},[163,303,304,306],{},[263,305,80],{"href":81}," — the AWS IAM permissions MilkStraw AI uses in your cloud account.",1792482912339]