What permissions do the different user roles in OpsCompass grant?

When a new user is invited to OpsCompass they come in as a "user" with the lowest permissions, but can be assigned roles from an administrator from the list below:


  • User - has basic access in OpsCompass, including seeing drift, inventory, and compliance problems, creating mitigations and exceptions, and connecting additional cloud accounts. 
  • Database Manager - can download scripts and update license entitlements, configurations, and secrets.
  • Administrator can link companies, invite users, create teams, assign document permissions, access all directories, manage compliance checks, and delete the company.