--- Title: Create roles with cluster access only alwaysopen: false categories: - docs - operate - rs description: Create roles with cluster access only. linkTitle: Create roles with cluster access only weight: 14 url: '/operate/rs/7.22/security/access-control/create-cluster-roles/' --- Roles with cluster access allow access to the Cluster Management UI and REST API. ## Default management roles Redis Enterprise Software includes five predefined roles that determine a user's level of access to the Cluster Manager UI and [REST API]({{}}). 1. **DB Viewer** - Read database settings 1. **DB Member** - Administer databases 1. **Cluster Viewer** - Read cluster settings 1. **Cluster Member** - Administer the cluster 1. **User Manager** - Administer users 1. **Admin** - Full cluster access 1. **None** - For data access only - cannot access the Cluster Manager UI or use the REST API For more details about the privileges granted by each of these roles, see [Cluster Manager UI permissions](#cluster-manager-ui-permissions) or [REST API permissions]({{}}). ## Cluster Manager UI permissions Here's a summary of the Cluster Manager UI actions permitted by each default management role: | Action | DB Viewer | DB Member | Cluster Viewer | Cluster Member | Admin | User Manager | |--------|:---------:|:---------:|:--------------:|:-----------:|:------:|:------:| | Create, edit, delete users and LDAP mappings | ❌ No | ❌ No | ❌ No | ❌ No | ✅ Yes | ✅ Yes | | Create support package | ❌ No | ✅ Yes | ❌ No | ✅ Yes | ✅ Yes | ❌ No | | Edit database configuration | ❌ No | ✅ Yes | ❌ No | ✅ Yes | ✅ Yes | ❌ No | | Reset slow log | ❌ No | ✅ Yes | ❌ No | ✅ Yes | ✅ Yes | ❌ No | | View cluster configuration | ❌ No | ❌ No | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | | View cluster logs | ❌ No | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes
| ✅ Yes
| | View cluster metrics | ❌ No | ❌ No | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | | View database configuration | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | | View database metrics | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | | View node configuration | ❌ No | ❌ No | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | | View node metrics | ❌ No | ❌ No | ✅ Yes | ✅ Yes | ✅ Yes | ✅ Yes | | View Redis database password | ❌ No | ✅ Yes | ❌ No | ✅ Yes | ✅ Yes | ✅ Yes | | View slow log | ❌ No | ✅ Yes | ❌ No | ✅ Yes | ✅ Yes | ❌ No | | View and edit cluster settings | ❌ No | ❌ No | ❌ No | ❌ No | ✅ Yes | ❌ No | ## Create roles for cluster access {#create-cluster-role} You can use the [Cluster Manager UI](#create-roles-ui) or the [REST API](#define-roles-rest-api) to create a role that grants cluster access but does not grant access to any databases. {{< multitabs id="create-cluster-role" tab1="Cluster Manager UI" tab2="REST API" >}} To create a role that grants cluster access using the Cluster Manager UI: 1. From **Access Control** > **Roles**, you can: - Select a role from the list of existing roles to edit it. - Click **+ Add role** to create a new role. Add role with name

1. Enter a descriptive name for the role. 1. Choose a **Management role** to determine cluster management permissions. Select a cluster management role to set the level of cluster management permissions for the new role.

Select a cluster management role to set the level of cluster management permissions for the new role.

1. To prevent database access when using this role, do not add any ACLs. 1. Click **Save**. -tab-sep- To [create a role]({{}}) that grants cluster access using the REST API: ```sh POST /v1/roles { "name": "", "management": "db_viewer | db_member | cluster_viewer | cluster_member | user_manager | admin" } ``` {{< /multitabs >}} You can [assign the new role to users]({{}}) to grant cluster access.