Skip to content

DOC-15047: Docs for sec/authz: billing viewer role #22169

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
florence-crl merged 3 commits into from
Jan 27, 2026
Merged

DOC-15047: Docs for sec/authz: billing viewer role #22169

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a86aec3
In authorization.md, modified Billing Coordinator and added Billing V…
florence-crl Jan 14, 2026
e70af3e
Merge remote-tracking branch 'origin/main' into DOC-15047
florence-crl Jan 27, 2026
a2fe79a
Incorporated Joe’s feedback.
florence-crl Jan 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
81 changes: 41 additions & 40 deletions src/current/_includes/cockroachcloud/org-roles/cloud-roles-table.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,53 +2,54 @@ The following table describes the high level permissions given by each Cockroach

<div class="roles-table" markdown="1">

| | [Org. Member]({% link cockroachcloud/authorization.md %}#organization-member) | [Org. Admin]({% link cockroachcloud/authorization.md %}#organization-admin) | [Billing Coord.]({% link cockroachcloud/authorization.md %}#billing-coordinator) | [Cluster Creator]({% link cockroachcloud/authorization.md %}#cluster-creator) | [Cluster Operator]({% link cockroachcloud/authorization.md %}#cluster-operator) | [Cluster Admin]({% link cockroachcloud/authorization.md %}#cluster-admin) | [Cluster Developer]({% link cockroachcloud/authorization.md %}#cluster-developer) | [Cluster Monitor]({% link cockroachcloud/authorization.md %}#cluster-monitor) | [Metrics Viewer]({% link cockroachcloud/authorization.md %}#metrics-viewer) | [Folder Admin]({% link cockroachcloud/authorization.md %}#folder-admin) | [Folder Mover]({% link cockroachcloud/authorization.md %}#folder-mover) |
|---|-------------|-------------|------------------|------------------|-------------------|----------------|--------------------|------------------|----------------|----------------|----------------|
| **User/Access Management** | | | | | | | | | |
| Assign and revoke roles | — | ✓ | — | — | — | ✓ | — | — | — | — | — |
| Assign {{ site.data.products.cloud }} user and service account roles | — | — | — | — | — | ✓ | — | — | — | — | — |
| Manage SQL users | — | — | — | — | — | ✓ | — | — | — | — | — |
| Manage {{ site.data.products.cloud }} users and service accounts | — | ✓ | — | — | — | ✓ | — | — | — | — | — |
| Apply roles at the [folder]({% link cockroachcloud/folders.md %}) scope | — | — | — | — | — | — | — | — | — | ✓ | — |
| **Cluster & Infrastructure** | | | | | | | | | |
| Create cluster or [private cluster]({% link cockroachcloud/private-clusters.md %}) | — | — | — | ✓ | — | — | — | — | — | — | — |
| Create / edit / delete cluster | — | — | — | — | — | ✓ | — | — | — | — | — |
| Edit / delete clusters created by this user | — | — | — | ✓ | — | — | — | — | — | — | — |
| Create / delete / manage [folders]({% link cockroachcloud/folders.md %}) | — | — | — | — | — | — | — | — | — | ✓ | — |
| Move cluster between [folders]({% link cockroachcloud/folders.md %}) | — | — | — | — | — | — | — | — | — | — | ✓ |
| Scale nodes | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Upgrade CockroachDB | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Configure [maintenance windows]({% link cockroachcloud/advanced-cluster-management.md %}#set-a-maintenance-window) | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Use the [{{ site.data.products.cloud }} Terraform provider]({% link cockroachcloud/provision-a-cluster-with-terraform.md %}) | — | — | — | ✓ | — | ✓ | — | — | — | — | — |
| **Monitoring & Observability** | | | | | | | | | |
| View cluster details | — | — | — | — | — | — | ✓ | — | — | — | — |
| View [audit logs]({% link cockroachcloud/cloud-org-audit-logs.md %}) | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| View [insights]({% link cockroachcloud/insights-page.md %}) | — | — | — | — | ✓ | ✓ | — | ✓ | — | — | — |
| View [jobs]({% link cockroachcloud/jobs-page.md %}) | — | — | — | — | ✓ | ✓ | — | ✓ | — | — | — |
| View [sql activity]({% link cockroachcloud/statements-page.md %}) | — | — | — | — | ✓ | ✓ | — | ✓ | — | — | — |
| View [metrics]({% link cockroachcloud/metrics.md %}) | — | — | — | — | ✓ | ✓ | — | — | ✓ | — | — |
| Send [test alerts]({% link cockroachcloud/alerts-page.md %}#send-a-test-alert) | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Access [DB console]({% link cockroachcloud/network-authorization.md %}#db-console) | — | — | — | — | ✓ | ✓ | ✓ | — | — | — | — |
| **Security** | | | | | | | | | |
| Configure [cluster SSO]({% link cockroachcloud/cloud-sso-sql.md %}) | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Manage [egress perimeter controls]({% link cockroachcloud/egress-perimeter-controls.md %}) | — | — | — | — | — | ✓ | — | — | — | — | — |
| Manage [network authorization]({% link cockroachcloud/network-authorization.md %}) | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| View PCI status | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| **Database & Data** | | | | | | | | | |
| Manage databases | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| View / restore [backups]({% link cockroachcloud/backup-and-restore-overview.md %}) | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| **Billing & Licensing** | | | | | | | | | |
| Manage [billing]({% link cockroachcloud/billing-management.md %}) | — | — | ✓ | — | — | — | — | — | — | — | — |
| Manage [email alerts]({% link cockroachcloud/alerts-page.md %}#configure-alerts) | — | ✓ | — | — | — | — | — | — | — | — | — |
| Manage CockroachDB [Self-Hosted cluster licenses]({% link {{ site.current_cloud_version }}/licensing-faqs.md %}#obtain-a-license) | — | ✓ | — | — | — | — | — | — | — | — | — |
| | [Org. Member]({% link cockroachcloud/authorization.md %}#organization-member) | [Org. Admin]({% link cockroachcloud/authorization.md %}#organization-admin) | [Billing Coord.]({% link cockroachcloud/authorization.md %}#billing-coordinator) | [Billing Viewer]({% link cockroachcloud/authorization.md %}#billing-viewer) | [Cluster Creator]({% link cockroachcloud/authorization.md %}#cluster-creator) | [Cluster Operator]({% link cockroachcloud/authorization.md %}#cluster-operator) | [Cluster Admin]({% link cockroachcloud/authorization.md %}#cluster-admin) | [Cluster Developer]({% link cockroachcloud/authorization.md %}#cluster-developer) | [Cluster Monitor]({% link cockroachcloud/authorization.md %}#cluster-monitor) | [Metrics Viewer]({% link cockroachcloud/authorization.md %}#metrics-viewer) | [Folder Admin]({% link cockroachcloud/authorization.md %}#folder-admin) | [Folder Mover]({% link cockroachcloud/authorization.md %}#folder-mover) |
|---|-------------|-------------|------------------|------------------|------------------|-------------------|----------------|--------------------|------------------|----------------|----------------|----------------|
| **User/Access Management** | | | | | | | | | | | |
| Assign and revoke roles | — | ✓ | — | — | — | — | ✓ | — | — | — | — | — |
| Assign {{ site.data.products.cloud }} user and service account roles | — | — | — | — | — | — | ✓ | — | — | — | — | — |
| Manage SQL users | — | — | — | — | — | — | ✓ | — | — | — | — | — |
| Manage {{ site.data.products.cloud }} users and service accounts | — | ✓ | — | — | — | — | ✓ | — | — | — | — | — |
| Apply roles at the [folder]({% link cockroachcloud/folders.md %}) scope | — | — | — | — | — | — | — | — | — | — | ✓ | — |
| **Cluster & Infrastructure** | | | | | | | | | | | |
| Create cluster or [private cluster]({% link cockroachcloud/private-clusters.md %}) | — | — | — | — | ✓ | — | — | — | — | — | — | — |
| Create / edit / delete cluster | — | — | — | — | — | — | ✓ | — | — | — | — | — |
| Edit / delete clusters created by this user | — | — | — | — | ✓ | — | — | — | — | — | — | — |
| Create / delete / manage [folders]({% link cockroachcloud/folders.md %}) | — | — | — | — | — | — | — | — | — | — | ✓ | — |
| Move cluster between [folders]({% link cockroachcloud/folders.md %}) | — | — | — | — | — | — | — | — | — | — | — | ✓ |
| Scale nodes | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Upgrade CockroachDB | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Configure [maintenance windows]({% link cockroachcloud/advanced-cluster-management.md %}#set-a-maintenance-window) | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Use the [{{ site.data.products.cloud }} Terraform provider]({% link cockroachcloud/provision-a-cluster-with-terraform.md %}) | — | — | — | — | ✓ | — | ✓ | — | — | — | — | — |
| **Monitoring & Observability** | | | | | | | | | | | |
| View cluster details | — | — | — | — | — | — | — | ✓ | — | — | — | — |
| View [audit logs]({% link cockroachcloud/cloud-org-audit-logs.md %}) | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| View [insights]({% link cockroachcloud/insights-page.md %}) | — | — | — | — | — | ✓ | ✓ | — | ✓ | — | — | — |
| View [jobs]({% link cockroachcloud/jobs-page.md %}) | — | — | — | — | — | ✓ | ✓ | — | ✓ | — | — | — |
| View [sql activity]({% link cockroachcloud/statements-page.md %}) | — | — | — | — | — | ✓ | ✓ | — | ✓ | — | — | — |
| View [metrics]({% link cockroachcloud/metrics.md %}) | — | — | — | — | — | ✓ | ✓ | — | — | ✓ | — | — |
| Send [test alerts]({% link cockroachcloud/alerts-page.md %}#send-a-test-alert) | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Access [DB console]({% link cockroachcloud/network-authorization.md %}#db-console) | — | — | — | — | — | ✓ | ✓ | ✓ | — | — | — | — |
| **Security** | | | | | | | | | | | |
| Configure [cluster SSO]({% link cockroachcloud/cloud-sso-sql.md %}) | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| Manage [egress perimeter controls]({% link cockroachcloud/egress-perimeter-controls.md %}) | — | — | — | — | — | — | ✓ | — | — | — | — | — |
| Manage [network authorization]({% link cockroachcloud/network-authorization.md %}) | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| View PCI status | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| **Database & Data** | | | | | | | | | | | |
| Manage databases | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| View / restore [backups]({% link cockroachcloud/backup-and-restore-overview.md %}) | — | — | — | — | — | ✓ | ✓ | — | — | — | — | — |
| **Billing & Licensing** | | | | | | | | | | | |
| Manage [billing]({% link cockroachcloud/billing-management.md %}) | — | — | ✓ | — | — | — | — | — | — | — | — | — |
| View [billing]({% link cockroachcloud/billing-management.md %}) details | — | — | ✓ | ✓ | — | — | — | — | — | — | — | — |
| Manage [email alerts]({% link cockroachcloud/alerts-page.md %}#configure-alerts) | — | ✓ | — | — | — | — | — | — | — | — | — | — |
| Manage CockroachDB [Self-Hosted cluster licenses]({% link {{ site.current_cloud_version }}/licensing-faqs.md %}#obtain-a-license) | — | ✓ | — | — | — | — | — | — | — | — | — | — |

</div>

Some roles can be assigned to users at specific levels of scope to provide more granular permission control:

| **Scope level** | **Description** | **Applicable roles** |
|---|---|---|
| `Organization` | Applies to the entire CockroachDB {{ site.data.products.cloud }} organization, including all clusters and folders | `Cluster Operator`, `Cluster Admin`, `Cluster Creator`, `Cluster Developer`, `Cluster Monitor`, `Metrics Viewer`, `Billing Coordinator`, `Organization Admin`, `Folder Admin`, `Folder Mover` |
| `Organization` | Applies to the entire CockroachDB {{ site.data.products.cloud }} organization, including all clusters and folders | `Cluster Operator`, `Cluster Admin`, `Cluster Creator`, `Cluster Developer`, `Cluster Monitor`, `Metrics Viewer`, `Billing Coordinator`, `Billing Viewer`, `Organization Admin`, `Folder Admin`, `Folder Mover` |
| `Folder` | Applies to clusters within a specific [folder]({% link cockroachcloud/folders.md %}). Only available as a selectable scope if folders have been created within the organization by a user with the `Folder Admin` role | `Cluster Operator`, `Cluster Admin`, `Cluster Creator`, `Cluster Developer`, `Cluster Monitor`, `Metrics Viewer`, `Folder Admin`, `Folder Mover` |
| `Cluster` | Applies to a specific cluster | `Cluster Operator`, `Cluster Admin`, `Cluster Developer`, `Cluster Monitor`, `Metrics Viewer` |

Expand Down
6 changes: 5 additions & 1 deletion src/current/cockroachcloud/authorization.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,7 +66,11 @@ This role can be assigned only at the organization scope.

### Billing Coordinator

The **Billing Coordinator** role allows users to [manage billing for that organization]({% link cockroachcloud/billing-management.md %}) through the CockroachDB {{ site.data.products.cloud }} console billing page at [`https://cockroachlabs.cloud/billing/overview`](https://cockroachlabs.cloud/billing/overview).
The **Billing Coordinator** role allows users to [manage and view billing details, invoices, and usage for that organization]({% link cockroachcloud/billing-management.md %}) through the CockroachDB {{ site.data.products.cloud }} console billing page at [`https://cockroachlabs.cloud/billing/overview`](https://cockroachlabs.cloud/billing/overview).

### Billing Viewer

The **Billing Viewer** role allows users to [view billing details, invoices, and usage for that organization]({% link cockroachcloud/billing-management.md %}) through the CockroachDB {{ site.data.products.cloud }} console billing page at [`https://cockroachlabs.cloud/billing/overview`](https://cockroachlabs.cloud/billing/overview).

### Cluster Operator

Expand Down
6 changes: 5 additions & 1 deletion src/current/cockroachcloud/billing-management.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,11 @@ toc: true
docs_area:
---

The **Billing** page contains an overview of your charges and the payment details on file for your CockroachDB {{ site.data.products.cloud }} organization. To view the **Billing** page, [log in](https://cockroachlabs.cloud/) and click **Billing**.
The **Billing** page contains an overview of your charges and the payment details on file for your CockroachDB {{ site.data.products.cloud }} organization.

## View billing for an organization

Users with the [Billing Coordinator]({% link cockroachcloud/authorization.md %}#billing-coordinator) or [Billing Viewer]({% link cockroachcloud/authorization.md %}#billing-viewer) role can view billing details, invoices, and usage for the organization. To view the **Billing** page, [log in](https://cockroachlabs.cloud/) and click **Billing**.

## Set up billing for an organization

Expand Down
Loading