Project Member Permissions

What each project role can do. Roles are assigned in Manage Project Users.

Below is the overview of all project permissions by five types of roles:

Action	Limited Guest	Guest	Developer	Master	Project Admin	System Administrator
See the project configurations	✓	✓	✓	✓	✓	✓
Edit the project configurations					✓	✓
See a list of project members		✓	✓	✓	✓	✓
Create/edit/delete project members					✓	✓
See a list of project logs		✓	✓	✓	✓	✓
See a list of project replications				✓	✓	✓
See a list of project replication jobs					✓	✓
See a list of project labels				✓	✓	✓
Create/edit/delete project labels				✓	✓	✓
See a list of repositories	✓	✓	✓	✓	✓	✓
Create repositories			✓	✓	✓	✓
Edit/delete repositories				✓	✓	✓
See a list of images	✓	✓	✓	✓	✓	✓
Retag image		✓	✓	✓	✓	✓
Pull image	✓	✓	✓	✓	✓	✓
Push image			✓	✓	✓	✓
Scan/delete image				✓	✓	✓
Add scanners to Harbor						✓
Edit scanners in projects					✓	✓
See a list of image vulnerabilities	✓	✓	✓	✓	✓	✓
See image build history	✓	✓	✓	✓	✓	✓
Add/Remove labels of image			✓	✓	✓	✓
See a list of helm charts	✓	✓	✓	✓	✓	✓
Download helm charts	✓	✓	✓	✓	✓	✓
Upload helm charts			✓	✓	✓	✓
Delete helm charts				✓	✓	✓
See a list of helm chart versions	✓	✓	✓	✓	✓	✓
Download helm chart versions	✓	✓	✓	✓	✓	✓
Upload helm chart versions			✓	✓	✓	✓
Delete helm chart versions				✓	✓	✓
Add/Remove labels of helm chart version			✓	✓	✓	✓
See a list of project robots				✓	✓	✓
Create/edit/delete project robots					✓	✓
See configured CVE whitelist	✓	✓	✓	✓	✓	✓
Create/edit/remove CVE whitelist					✓	✓
Enable/disable webhooks			✓	✓	✓	✓
Create/delete tag retention rules			✓	✓	✓	✓
Enable/disable tag retention rules			✓	✓	✓	✓
Create/delete tag immutability rules				✓	✓	✓
Enable/disable tag immutability rules				✓	✓	✓
See project quotas	✓	✓	✓	✓	✓	✓
Edit project quotas						✓

The matrix applies to the users that are registered in the instance.

Unregistered anonymous users can access public projects in the read-only mode and pull any images from such projects and for both types of projects.