<commit_before>---
title: Organizations, Spaces, Roles, and Permissions
---

Cloud Foundry uses role-based access control (RBAC), with each role granting
permissions in either an organization or an application space.

## <a id='organizations'></a>Organizations ##

An organization, or org, consists of users grouped together for management
purposes.
All member of an org share a resource quota plan, services availability, and
custom domains and routes.

## <a id='spaces'></a>Spaces ##

All applications and services are scoped to an application space, or app space.
Each org contains at least one app space.
An app space provides a set of users access to a shared space for application
development, deployment, and maintenance.
Each app space role applies only to a particular app space.
By default, the org manager has app space manager permissions for all spaces
within the organization.

## <a id='roles'></a>Roles and Permissions ##

A user can have one or more roles.
The combination of these roles defines the user’s overall permissions in the org
and within specific app spaces in that org.

### <a id='org-roles'></a>Org Roles and Permissions ###

####Org Manager ####

Assign this role to managers or other users who need to administer the account.

**Note**: By default, an org manager has space manager permissions for all app
spaces in the org.

An Org Manager can:

* Add and manage users
* Select and change the resource quota plan
* Establish spending limits
* View and edit account billing information
* View and edit user information and organization usage
* Create, view, edit, and delete app spaces
* Invite and manage users in app spaces
* View status and usage of applications
* Add domains and assign them to an app spaces

####Org Auditor ####

Assign this role to people who need to view but not edit user information and
organization usage information.

An Organization Auditor can:

* View user information and organization usage

### <a id='space-roles'></a>App Space Roles and Permissions ###

####App Space Manager ####

Assign this role to managers or other users who need to administer an
app space.

An App Space Manager can:<commit_msg>change 'resource quota plan' to 'plan' in roles.html<commit_after>---
title: Organizations, Spaces, Roles, and Permissions
---

Cloud Foundry uses role-based access control (RBAC), with each role granting
permissions in either an organization or an application space.

## <a id='organizations'></a>Organizations ##

An organization, or org, consists of users grouped together for management
purposes.
All member of an org share a resource quota plan, services availability, and
custom domains and routes.

## <a id='spaces'></a>Spaces ##

All applications and services are scoped to an application space, or app space.
Each org contains at least one app space.
An app space provides a set of users access to a shared space for application
development, deployment, and maintenance.
Each app space role applies only to a particular app space.
By default, the org manager has app space manager permissions for all spaces
within the organization.

## <a id='roles'></a>Roles and Permissions ##

A user can have one or more roles.
The combination of these roles defines the user’s overall permissions in the org
and within specific app spaces in that org.

### <a id='org-roles'></a>Org Roles and Permissions ###

####Org Manager ####

Assign this role to managers or other users who need to administer the account.

**Note**: By default, an org manager has space manager permissions for all app
spaces in the org.

An Org Manager can:

* Add and manage users
* Select and change the plan
* Establish spending limits
* View and edit account billing information
* View and edit user information and organization usage
* Create, view, edit, and delete app spaces
* Invite and manage users in app spaces
* View status and usage of applications
* Add domains and assign them to an app spaces

####Org Auditor ####

Assign this role to people who need to view but not edit user information and
organization usage information.

An Organization Auditor can:

* View user information and organization usage

### <a id='space-roles'></a>App Space Roles and Permissions ###

####App Space Manager ####

Assign this role to managers or other users who need to administer an
app space.

An App Space Manager can:
{'fraction_non_alphanumeric': 0.07077416399450298, 'fraction_numerical': 0.0, 'mean_word_length': 4.548919949174079, 'pattern_counts': {'":': 0, '<': 23, '<?xml version=': 0, '>': 23, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2594341', 'n_tokens_mistral': 1100, 'n_tokens_neox': 1083, 'n_words': 640}