Configure registry access

A registry admin can configure registry roles, add users, or remove users from a registry by configuring the registry’s settings.

Manage users

Add a user or a team

Registry admins can add individual users or entire teams to a registry. To add a user or team to a registry:

  1. Navigate to the Registry at https://wandb.ai/registry/.
  2. Select the registry you want to add a user or team to.
  3. Click on the gear icon on the upper right hand corner to access the registry settings.
  4. In the Registry access section, click Add access.
  5. Specify one or more user names, emails, or the team names to the Include users and teams field.
  6. Click Add access.
Animation of using the UI to add teams and individual users to a registry

Learn more about configuring user roles in a registry, or Registry role permissions .

Remove a user or team

A registry admin can remove individual users or entire teams from a registry. To remove a user or team from a registry:

  1. Navigate to the Registry at https://wandb.ai/registry/.
  2. Select the registry you want to remove a user from.
  3. Click on the gear icon on the upper right hand corner to access the registry settings.
  4. Navigate to the Registry access section and type in the username, email, or team you want to remove.
  5. Click the Delete button.

Registry roles

Each user in a registry has a registry role, which determines what they can do in that registry.

W&B automatically assigns a default registry role to a user or team when they are added to a registry.

EntityDefault registry role
TeamViewer
User (non admin)Viewer
Org adminAdmin

A registry admin can assign or modify roles for users and teams in a registry. See Configure user roles in a registry for more information.

The proceeding table lists the different roles a user can have and their permissions:

PermissionPermission GroupViewerMemberAdmin
View a collection’s detailsReadXXX
View a linked artifact’s detailsReadXXX
Usage: Consume an artifact in a registry with use_artifactReadXXX
Download a linked artifactReadXXX
Download files from an artifact’s file viewerReadXXX
Search a registryReadXXX
View a registry’s settings and user listReadXXX
Create a new automation for a collectionCreateXX
Turn on Slack notifications for new version being addedCreateXX
Create a new collectionCreateXX
Create a new custom registryCreateXX
Edit collection card (description)UpdateXX
Edit linked artifact descriptionUpdateXX
Add or delete a collection’s tagUpdateXX
Add or delete an alias from a linked artifactUpdateXX
Link a new artifactUpdateXX
Edit allowed types list for a registryUpdateXX
Edit custom registry nameUpdateXX
Delete a collectionDeleteXX
Delete an automationDeleteXX
Unlink an artifact from a registryDeleteXX
Edit accepted artifact types for a registryAdminX
Change registry visibility (Organization or Restricted)AdminX
Add users to a registryAdminX
Assign or change a user’s role in a registryAdminX

Inherited permissions

A user’s permission in a registry depends on the highest level of privilege assigned to that user, whether individually or by team membership.

For example, suppose a registry admin adds a user called Nico to Registry A and assigns them a Viewer registry role. A registry admin then adds a team called Foundation Model Team to Registry A and assigns Foundation Model Team a Member registry role.

Nico is a member of the Foundation Model Team, which is a Member of the Registry. Because Member has more permission than Viewer, W&B grants Nico the Member role.

The proceeding table demonstrates the highest level of permission in the event of a conflict between a user’s individual registry role and the registry role of a team they are a member of:

Team registry roleIndividual registry roleInherited registry role
ViewerViewerViewer
MemberViewerMember
AdminViewerAdmin

If there is a conflict, W&B displays the highest level of permissions next to the name of the user.

For example, in the proceeding image Alex inherits Member role privileges because they are a member of the smle-reg-team-1 team.

A user inherits a Member role because they are part of a team.

Configure registry roles

  1. Navigate to the Registry at https://wandb.ai/registry/.
  2. Select the registry you want to configure.
  3. Click the gear icon on the upper right hand corner.
  4. Scroll to the Registry members and roles section.
  5. Within the Member field, search for the user or team you want to edit permissions for.
  6. In the Registry role column, click the user’s role.
  7. From the dropdown, select the role you want to assign to the user.