Overview
RBAC allows you to grant granular permission controls to sub-users in Wave, in addition to existing user management features. Specifically, you can assign view and edit permissions at the individual AWS account level.
How to Configure
Log in to Wave
Click the logo in the top right of Wave and select Settings
Under User Management in the bottom left, click Open User Management Screen
The user management screen will open in a new tab — click ADD ROLE to create a new role
When creating a sub-user, link the created role to assign the desired permissions to that sub-user
Role Categories
Wave — Permissions related to Wave. You can restrict which pages each sub-user can access and edit, and specify which AWS accounts, Azure subscriptions, and GCP projects are visible to each sub-user.
User — Permission to create, view, and edit Wave accounts and users in the user management screen
RBAC — Permission to create, view, and edit roles in the user management screen
Wave Permission Reference
Action | Description |
Admin | Full access — can view and edit all pages |
Account (read only) | Can only view selected accounts |
Account settings – Read & Write Access | Can edit account names and budget settings |
Account settings – Read Only | Can view account names and settings |
Download bulk | Enables bulk CSV download |
Group – Read & Write Access | Can create and edit groups |
Group – Read Only | Can view groups |
RI (read only) | Can view owned Reserved Instances |
Settings – Read & Write Access | Can edit account settings (language, password, 2FA, etc.) |
Settings – Read Only | Can view account settings (language, password, 2FA, etc.) |
Tags – Read & Write Access | Can edit cost allocation tags |
Tags – Read Only | Can view cost allocation tags |
Need More Help?
If any errors occur during the process or if you have any questions, please reach out to us:
📧 Email: ripple_cs@alphaus.cloud
💬 Live Chat: Available in the bottom-right corner of your dashboard
📖 Help Center: https://help.alphaus.cloud/