{
"schema_version": 2,
"id": "operate/rc/security/access-control/access-management",
"title": "Access management",
"url": "https://redis.io/docs/latest/operate/rc/security/access-control/access-management/",
"summary": "Control who can make changes to your databases using the Redis Cloud console.",
"tags": [
"docs",
"operate",
"rc"
],
"last_updated": "2026-10-02T16:06:07+01:00",
"page_type": "content",
"content_hash": "f860469c5f9030e121afaa89440a6b94b30f65d74aeb7558a251c901aa2b72ba",
"sections": [
{
"id": "overview",
"title": "Overview",
"role": "overview",
"text": "The **Access management** screen helps you manage:\n\n- The team of users allowed to access your subscription and its databases.\n- The API keys that authenticate application access to your account.\n- [Single sign-on (SSO) with SAML](https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso).\n\nHere, you learn how to manage your team's users and control their level of access. \n\nFor help managing API keys, see [Manage API keys](https://redis.io/docs/latest/operate/rc/api/get-started/manage-api-keys)."
},
{
"id": "manage-team-access",
"title": "Manage team access",
"role": "content",
"text": "The **Team** tab lets you manage the people allowed to access your account. Each authorized person is assigned to a role that specifies their privileges.\n\n\n\nThe list contains one entry summarizing the team settings for each user in your team. By default, the list includes the account owner.\n\nThe list includes several buttons and icons to help you manage the list:\n\n| Icon | Description |\n|------|-------------|\n|  | The **Add** button lets you add members to your team |\n|  | The **Edit** button lets you edit the settings for the selected team member |\n|  | The **Delete** button lets you remove members from your team\n|  | The **Sort ascending** and **Sort descending** icons display the list according to the selected order |\n\nYou can also use the list search to find a specific user or filter by **Role**, **User Type**, or **Options**."
},
{
"id": "add-user",
"title": "Add user",
"role": "content",
"text": "When you add a member to your team, the **Add user** dialog appears. \n\n\n\nUse the dialog to specify these values.\n\n| Setting | Description |\n|---------|-------------|\n| **First name** | First name of the user displayed in the Redis Cloud console and in email messages |\n| **Last name** | Last name of the user displayed in the Redis Cloud console and in email messages |\n| **Role** | The role identifies their subscription and account privileges. For details, see [Team management roles](#team-management-roles). |\n| **Email** | The address used for alerts and other email messages regarding the account | \n| **Alert emails** | Enable to be notified when subscription databases cross certain thresholds, such as exceeding memory limits or latency requirements |\n| **Operational emails** | Notifications about subscription and database changes, such as creating or deleting a database, and [subscription and database maintenance](https://redis.io/docs/latest/operate/rc/subscriptions/maintenance) |\n| **Billing emails** | Notifications about billing, such as when bills are issued and paid |\n| **Multi-factor authentication** | Whether MFA is enabled for the member. This is deactivated when members have not enabled or confirmed MFA in their user profile settings. |\n\nUse the **Add user** button to save your new team member details. \n\nRedis will send an activation email to the user once their details are saved. After following the activation link, they can sign in."
},
{
"id": "edit-user",
"title": "Edit user",
"role": "content",
"text": "To edit user team details, select the user from the list and then select the **Edit** button.\nThe **Edit user** dialog displays the details you can change. \n\n\n\nYou can change any detail except the team member's email address.\n\nSelect **Save user** to save your changes."
},
{
"id": "delete-user",
"title": "Delete user",
"role": "content",
"text": "To remove a member from your team, select them from the list and then select the **Delete** button. A confirmation dialog appears. \n\n\n\nSelect **Delete user** to confirm removal. This is a permanent action that cannot be undone."
},
{
"id": "team-management-roles",
"title": "Team management roles",
"role": "content",
"text": "Each team member is assigned a role that identifies their privileges and limits their activities in the Redis Cloud console.\n\nRoles and responsibilities are:\n\n- **Owner** can view, create, and edit any settings in the account.\n\n Each subscription must have at least one account owner. Accounts can have multiple owners.\n\n Owners can also manage subscriptions, databases, and API keys.\n\n- **Billing Admin** can view and edit settings related to billing and payments.\n\n Billing Admins can add and remove payment methods and change the payment method for a subscription, but they cannot change any other subscription or database settings.\n\n- **Manager** can view, create, and edit any setting in the subscription. \n\n Managers can change subscription costs and change payment methods associated with a subscription, but they cannot add or remove available payment methods.\n\n- **Member** can view, create, and edit databases in ways that do not impact costs.\n\n Members cannot create databases or edit databases in ways that impact costs.\n\n- **Viewer** can view all databases and their configurations, including database secrets.\n\n- **Logs viewer** can not access the Redis Cloud console. They are only allowed access to the [Redis Cloud API](https://redis.io/docs/latest/operate/rc/api) [`GET logs/`](https://redis.io/docs/latest/operate/rc/api/api-reference#tag/Account/operation/getAccountSystemLogs) endpoint. \n\nThis table shows each role's ability to perform common tasks.\n\n| **Task** | **Owner** | **Billing Admin** | **Manager** | **Member** | **Viewer** | **Logs Viewer** |\n|---|---|---|---|---|---|---|\n| Access management | ✅ Yes | ❌ No | ❌ No | ❌ No | ❌ No | ❌ No |\n| Account settings | ✅ Yes | ✅ Yes[1](#table-note-1) | ❌ No | ❌ No | ❌ No | ❌ No |\n| Billing & payments | ✅ Yes | ✅ Yes | ❌ No[2](#table-note-2) | ❌ No | ❌ No | ❌ No |\n| Create subscription | ✅ Yes | ❌ No | ✅ Yes | ❌ No | ❌ No | ❌ No |\n| Edit subscription | ✅ Yes | ✅ Yes[3](#table-note-3) | ✅ Yes | ❌ No | ❌ No | ❌ No |\n| Create database (affects cost) | ✅ Yes | ❌ No | ✅ Yes | ❌ No | ❌ No | ❌ No |\n| Edit database (affects cost) | ✅ Yes | ❌ No | ✅ Yes | ❌ No | ❌ No | ❌ No |\n| Create database (no cost impact) | ✅ Yes | ❌ No | ✅ Yes | ❌ No | ❌ No | ❌ No |\n| Edit database (no cost impact) | ✅ Yes | ❌ No | ✅ Yes | ✅ Yes | ❌ No | ❌ No |\n| View subscription | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | ❌ No |\n| View database | ✅ Yes | ✅ Yes[4](#table-note-4) | ✅ Yes | ✅ Yes | ✅ Yes | ❌ No |\n| Use the [REST API](https://redis.io/docs/latest/operate/rc/api) | ✅ Yes | ✅ Yes[5](#table-note-5) | ❌ No | ❌ No | ✅ Yes[6](#table-note-6) | ✅ Yes[7](#table-note-7) |\n\n1. Billing Admins can only edit the account billing address in Account Settings.\n\n2. Managers are able to view existing payment methods and assign them as payment methods for subscriptions, but they cannot add or remove payment methods.\n\n3. Billing Admins can only change the payment method when editing a subscription.\n\n4. Billing Admins can see the list of databases, but can not see database details, including connection details.\n\n5. Billing admins can use REST API for billing data.\n\n6. Viewers can use the REST API for GET requests, but cannot modify subscription or database details.\n\n7. Logs viewers can only use the [`GET logs/`](https://redis.io/docs/latest/operate/rc/api/api-reference#tag/Account/operation/getAccountSystemLogs) endpoint of the REST API."
}
],
"examples": []
}