DigitalOcean Announces Enhanced Role-Based Access Control to Streamline Company and Security Operations

By: DigitalOcean Holdings, Inc. via Business Wire

August 27, 2024 at 08:00 AM EDT

New offering provides robust and efficient method for managing user access

DigitalOcean Holdings, Inc. (NYSE: DOCN), the developer cloud optimized for startups and growing digital businesses, today announced updates to its role-based access control (RBAC), a method for managing user access to systems and resources within an organization by assigning permissions to roles rather than to individual users. Today’s updates are highlighted by a new set of predefined roles that make it easier for DigitalOcean administrators to provide a customizable level of access to their individual users. With this feature release, customers can now easily access this new set of predefined roles in the DigitalOcean Cloud Console.

RBAC builds on identity and access management (IAM), which helps to ensure the right individuals have the appropriate access to technology resources within an organization. With RBAC, users are assigned roles based on their job responsibilities, qualifications, and expectations. The new predefined roles announced today build on the existing basic roles (owner, member and biller), and are designed to fit the most common use cases requested by customers. They include:

Modifier: This role permits users to update but does not allow them to delete resources. It is ideal for teams that wish to protect sensitive resources from deletion while still allowing members to manage them.
Billing viewer: Permits read-only access to billing information only, giving users insight into billing details for cost analysis, transparency, and governance without exposing sensitive operational controls.
Resource viewer: This role permits read-only access to resources, ideal for audit or compliance purposes. Users with this role will not have permission to create, update, or delete resources.

This approach simplifies permission management and helps to enhance security by ensuring that users have only the access necessary to perform their job functions.

“Scaling your business means adding developers and other job functions to your teams, but we believe that should not mean adding complexity in managing identity and access. With our new predefined roles, you can assign privileges in a way to minimize risk, and meet audit or compliance requirements,” said Tyler Healy, CISO at DigitalOcean. “We’re excited to bring additional security and identity features that simplify cloud security, so developers can spend more time innovating.”

In the coming months, DigitalOcean will be releasing several features to strengthen its IAM offerings:

Per-bucket Spaces access keys: Spaces bucket access keys on a per-bucket basis.
RBAC custom roles: Allows customers to configure custom, persistent, reusable permission sets for their business needs which are not met by RBAC predefined roles.

About DigitalOcean

DigitalOcean simplifies cloud computing so businesses can spend more time creating software that changes the world. With its mission-critical infrastructure and fully managed offerings, DigitalOcean helps developers at startups and growing digital businesses rapidly build, deploy and scale - whether creating a digital presence or building digital products. DigitalOcean combines the power of simplicity, security, community and customer support so customers can spend less time managing their infrastructure and more time building innovative applications that drive business growth. For more information, visit digitalocean.com.