Overview
GPCN™ gives you control over who in your organization can access the portal and what they can do. Access is managed through three building blocks: resource groups, users, and roles. Together, they let you organize your team, assign resources, and make sure each person has exactly the access they need.
Key Concepts
Resource Groups
Resource groups are how you organize users and resources (VMs, GPU machines, volumes, VPCs, L2 segments) into logical collections. Every resource belongs to exactly one — there's no "unassigned" state — and every organization keeps one group, Default, that every user is automatically a member of and that can never be deleted.
Users in a resource group can access the resources assigned to that group, based on the role they hold there.
Users
Users are the people who have access to your GPCN™ organization. Each user has an email address, one or more roles that define what they can do, and membership in one or more resource groups that defines which resources they can access.
New users are added by invitation — an administrator sends an invite to their email address, and the user follows the link in the email to set their password and activate their account.
Users have an invite status of Activated, Pending (invite sent but not yet accepted), or Expired (invite link has lapsed and needs to be resent).
Roles
Roles define what actions a user can perform in the portal. When you assign a role to a user, you're granting them the set of capabilities that role includes.
Common roles include:
| Role | Description |
|---|---|
| Tenant Administrator | Full control of users, roles, resource groups and settings. Acts on infrastructure in the Default group and sees resources in every group |
| Tenant Manager | Manages resource groups and their membership, with full control over infrastructure in the groups it can reach |
| Tenant Operator | Full control over infrastructure within its resource groups — read-only access to resource groups and users |
| Tenant Viewer | Read-only access to resources, including the user list and role assignments; can manage their own profile and credentials |
A role can apply organization-wide, or be scoped to a single resource group — though an organization-wide role only reaches resources in the Default group. See Roles & Permissions for the full role hierarchy and permissions detail.
Your Organization
All users, resource groups, and resources in GPCN™ belong to your organization. This is the top-level boundary for your team's data and access.
Next Steps
- Manage Resource Groups — create and manage resource group membership
- Manage Users — invite, edit, and deactivate users
- Roles & Permissions — understand the full role and permissions model
.png)