{
  "schema_version": 2,
  "id": "operate/rs/security/access-control/create-cluster-roles",
  "title": "Create roles with cluster access only",
  "url": "https://redis.io/docs/latest/operate/rs/7.4/security/access-control/create-cluster-roles/",
  "summary": "Create roles with cluster access only.",
  "aliases": ["/operate/rs/security/access-control/admin-console-access/"],
  "content": "\nRoles with cluster access allow access to the Cluster Management UI and REST API.\n\n## Default management roles\n\nRedis Enterprise Software includes five predefined roles that determine a user's level of access to the Cluster Manager UI and [REST API](https://redis.io/docs/latest/operate/rs/references/rest-api).\n\n1. **DB Viewer** - Read database settings\n1. **DB Member** - Administer databases\n1. **Cluster Viewer** - Read cluster settings\n1. **Cluster Member** - Administer the cluster\n1. **Admin** - Full cluster access\n1. **None** - For data access only - cannot access the Cluster Manager UI or use the REST API\n\nFor more details about the privileges granted by each of these roles, see [Cluster Manager UI permissions](#cluster-manager-ui-permissions) or [REST API permissions](https://redis.io/docs/latest/operate/rs/references/rest-api/permissions).\n\n## Cluster Manager UI permissions\n\nHere's a summary of the Cluster Manager UI actions permitted by each default management role:\n\n| Action | DB Viewer | DB Member | Cluster Viewer | Cluster Member | Admin |\n|--------|:---------:|:---------:|:--------------:|:-----------:|:------:|\n| Create support package | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| Edit database configuration | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| Reset slow log | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View cluster configuration | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View cluster logs | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e\u003cbr /\u003e |\n| View cluster metrics | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View database configuration | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View database metrics | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View node configuration | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View node metrics | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View Redis database password | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View slow log | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n| View and edit cluster settings |\u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Not allowed\"\u003e\u0026#x274c; No\u003c/span\u003e | \u003cspan title=\"Allowed\"\u003e\u0026#x2705; Yes\u003c/span\u003e |\n\n## Create roles for cluster access {#create-cluster-role}\n\nTo create a role that grants cluster access but does not grant access to any databases:\n\n1. From **Access Control** \u003e **Roles**, you can:\n\n    - Point to a role and select ![The Edit button](https://redis.io/docs/latest/images/rs/buttons/edit-button.png#no-click) to edit an existing role.\n\n    - Select **+ Add role** to create a new role.\n\n    ![Add role with name](https://redis.io/docs/latest/images/rs/access-control-role-panel.png)\n\n1. Enter a descriptive name for the role.\n\n1. Choose a **Cluster management role** to determine cluster management permissions.\n\n    ![Select a cluster management role to set the level of cluster management permissions for the new role.](https://redis.io/docs/latest/images/rs/screenshots/access-control/rbac-create-role-cluster-only.png)\n    \n1. To prevent database access when using this role, do not add any ACLs.\n\n1. Select **Save**.\n\nYou can [assign the new role to users](https://redis.io/docs/latest/operate/rs/security/access-control/create-users#assign-roles-to-users) to grant cluster access.\n",
  "tags": ["docs","operate","rs"],
  "last_updated": "2026-10-21T09:46:20-07:00"
}