Roles

What is a Role?

A role is an identity with permission policies that determine what the role can and cannot do in Wasabi. A role can be associated with any user who needs that identity. For example, “contract engineer” may be a role. If Mary, Bob, Jennifer, and John are associated with that role, they would share in the permissions defined for the role of “contract engineer.”

You can create up to 250 roles per account.

Roles help to prevent accidental access to or modification of resources. You can give a user permission to switch roles created within your Wasabi account or another account. In this way, the user can switch roles, use the Wasabi Management Console with permissions that he or she does not normally have, and then exit from the role to surrender the permissions. 

A role might grant a user in one Wasabi account access to resources in another account. Or, given a specific role, a user might have access to resources typically not available to the user. For example, the person who normally functions as a contract engineer, might need to access schematic drawings and can switch to the “engineer-schematics” role to do so.