Core roles

Table of contents

For: Administrators

Core roles are Docker's built-in roles with predefined permission sets. This page provides an overview of Docker's core roles and permissions for each role.

What are core roles?

Docker organizations have three core roles:

Member: Non-administrative role with basic access. Members can view other organization members and pull images from repositories they have access to.
Editor: Partial administrative access. Editors can create, edit, and delete repositories. They can also manage team permissions for repositories.
Owner: Full administrative access. Owners can manage all organization settings, including repositories, teams, members, billing, and security features.

A company owner has the same organization management permissions as an organization owner, but there are some content and registry permissions that company owners don't have (for example, repository pull/push). For more information, see Company overview.

Content and registry permissions

These permissions apply organization-wide, including all repositories in your organization's namespace.

Permission	Member	Editor	Owner
Explore images and extensions	✅	✅	✅
Star, favorite, vote, and comment on content	✅	✅	✅
Pull images	✅	✅	✅
Create and publish an extension	✅	✅	✅
Become a Verified, Official, or Open Source publisher	❌	❌	✅
Edit and delete publisher repository logos	❌	✅	✅
Configure DVP analytics settings	❌	✅	✅
Observe content engagement as a publisher	❌	❌	✅
Create public and private repositories	❌	✅	✅
Disable public repositories	❌	✅	✅
Edit and delete repositories	❌	✅	✅
Manage tags	❌	✅	✅
View repository activity	❌	❌	✅
Set up Automated builds	❌	❌	✅
Edit build settings	❌	❌	✅
View teams	✅	✅	✅
Assign team permissions to repositories	❌	✅	✅

When you add members to teams, you can grant additional repository permissions beyond their organization role:

Role permissions: Applied organization-wide (member or editor)
Team permissions: Additional permissions for specific repositories

Organization management permissions

Permission	Member	Editor	Owner
Create teams	❌	❌	✅
Manage teams (including delete)	❌	❌	✅
Configure the organization's settings (including linked services)	❌	❌	✅
Add organizations to a company	❌	❌	✅
Invite members	❌	❌	✅
Manage members	❌	❌	✅
Manage member roles and permissions	❌	❌	✅
View member activity	❌	❌	✅
Export and reporting	❌	❌	✅
Image Access Management	❌	❌	✅
Registry Access Management	❌	❌	✅
Namespace access control	❌	❌	✅
Set up Single Sign-On (SSO) and SCIM	❌	❌	✅ *
Require Docker Desktop sign-in	❌	❌	✅ *
Manage billing information (for example, billing address)	❌	❌	✅
Manage payment methods (for example, credit card or invoice)	❌	❌	✅
View billing history	❌	❌	✅
Manage subscriptions	❌	❌	✅
Manage seats	❌	❌	✅
Upgrade and downgrade plans	❌	❌	✅

Tip
If you want more granular access control, you can upgrade to a Docker Business plan for custom roles and advanced permissions.

* If not part of a company

Docker Scout permissions

Permission	Member	Editor	Owner
View and compare analysis results	✅	✅	✅
Upload analysis records	✅	✅	✅
Activate and deactivate Docker Scout for a repository	❌	✅	✅
Create environments	❌	❌	✅
Manage registry integrations	❌	❌	✅

Docker Build Cloud permissions

Permission	Member	Editor	Owner
Use a cloud builder	✅	✅	✅
Create and remove builders	✅	✅	✅
Configure builder settings	✅	✅	✅
Buy minutes	❌	❌	✅
Manage subscription	❌	❌	✅

Feb	MAR	Apr
	08
2025	2026	2027

Ask me about Docker

Core roles

What are core roles?

Content and registry permissions

Organization management permissions

Docker Scout permissions

Docker Build Cloud permissions