C3 AI Documentation Home

C3 AI Studio Built-in Roles

The C3 AI Studio built-in roles allow users to manage and utilize the C3 AI Studio environment.

Studio Admin (C3.StudioAdmin)

The C3.StudioAdmin role has all the C3.StudioUser permissions and additional capabilities. Assign this role with caution to avoid assigning users more permissions than necessary.

C3.StudioAdmin typical persona

The typical persona for a user with the C3.StudioAdmin role is a Project Lead or Senior Developer who needs to set up and manage development environments and oversee multiple application projects. Typically, an administrator does the following:

  • Control cost and resource utilization
  • Triage and troubleshoot development issues related to application lifecycle management
  • Avoid productivity interruptions

C3.StudioAdmin permissions

Users with the C3.StudioAdmin role can manage single-node environments (SNEs) and shared environments, and manage applications within their SNE or environment. The role includes the following permissions:

  • Create, stop, resume, and terminate SNEs, shared environments, and applications.

  • Upgrade environment, application, and root package server versions.

  • Create, setup, and apply hibernation policies.

  • Enable application monitoring for applications within a C3 AI Studio instance.

  • Monitor the status of an application.

  • Access the C3 AI Console of the Studio application in C3 AI Studio.

  • Access activity log and monitoring metrics for environments and applications within a C3 AI Studio instance.

  • Stop or delete a build in C3 AI Studio Release Management.

  • Allow users with the C3.StudioUser role to customize hardware profiles.

  • Troubleshoot environments or applications in an error state.

  • Limit the maximum number of environments a specific user can create, or allow a specific user to modify a node pool plan. Here are examples:

    Sets the maximum number of SNEs that a specific user can create in the C3 AI Studio to three:

    JavaScript
    StudioUserConfig.forId(<USER_ID>).setConfigValue('maxSingleNodeEnvPerStudioUser', 3)

    Sets the maximum number of non-SNEs that a specific user can create in the C3 AI Studio to three:

    JavaScript
    StudioUserConfig.forId(<USER_ID>).setConfigValue('maxNonSingleNodeEnvPerStudioUser', 3)

    Allow a specific user to modify node pool plan for their own environments and apps:

    JavaScript
    StudioUserConfig.forId(<USER_ID>).setConfigValue('enableCustomNodePoolOnEnvAppCreation', true)

  • Can elevate the permissions of a user with the C3.StudioUser role to one or more of the following roles:

    • C3.StudioAdmin,
    • C3.ArtifactHubAdmin
    • C3.JarvisAdmin (Release Management administrator)

    To elevate the role of a user who does not have the C3.StudioUser role, a user with the C3.ClusterAdmin must first add them to the cluster. See Map Identity Provider Groups to learn how to add users to a cluster through Identity Provider mapping.

Best practices

The following are best practices regarding the C3.StudioAdmin role:

  • Provide C3.StudioAdmin access to no more than 3 users.
  • Grant users the minimum permission level they need to accomplish their tasks.
  • Consider giving users other types of administrator privileges for specific purposes instead of C3.StudioAdmin permissions. Examples of roles with some administrator privileges are the C3.ArtifactHubAdmin and Release Management administrator (C3.JarvisAdmin).

Studio User (C3.StudioUser)

Users with the C3.StudioUser role are limited to creating and managing an SNE, and managing applications within their SNE.

Users with the C3.StudioUser role cannot access the Studio application C3 AI Console.

C3.StudioUser typical persona

The typical persona of a user with the C3.StudioUser role is a Developer or Tester who needs access to a personal development environment without the risk of affecting shared resources.

C3.StudioUser permissions

The C3.StudioUser role has the following capabilities:

  • Create and manage one SNE
  • Create and manage one shared environment
  • Create and manage applications within their SNE and shared environment
  • Access the C3 AI Console of their own applications if their role within the application allows them to do so.

Console User (C3.ConsoleUser)

Users with the C3.ConsoleUser role have permissions to perform C3 AI Console management tasks.

Assign this role to users who require access to the C3 AI Console, a web-based interface for interacting with the C3 Agentic AI Platform.

Typical persona

The typical persona for a user with the C3.ConsoleUser role is a developer, data scientist, or administrator who needs to run commands, manage data, and perform other operations in the platform.

C3.ConsoleUser permissions

The C3.ConsoleUser has the following capabilities in C3 AI Console:

C3 AI Console user interface:

  • Show or hide columns in the data grid display

Authorization and configuration:

  • Authorize actions
  • Access and manage C3 AI Console configuration settings
  • Access information about current environment

Package and Type access:

  • Listen for changes to package structure
  • Handle UI content and services to render and manage UI components
  • View available methods for a given Type
  • Handle Type System requests, such as load Types and run actions from them
  • Read string content from files or other sources
  • Load and manage Type definitions and source maps
  • Render Type documentation

Data generation and network requests:

  • Generate sample data objects for a Type
  • Retrieve endpoint URL for an application to make network requests

See also

Was this page helpful?