Based on the research, I can provide recommendations for your setup. Here's how you can organize access for both technical and non-technical users:
1. Workspace Organization:
- Create separate workspaces for different purposes:
- A "Development" workspace for your technical team
- A "Production" workspace for your non-technical users with only approved, production-ready flows
This separation ensures non-technical users only see and interact with vetted, stable flows.
2. Access Levels:
- For Technical Users:
- Grant them "Admin" or full "Member" roles at the account level
- This gives them full access to create flows, manage deployments, and configure settings
- For Non-technical Users:
- Add them as "Viewers" or limited "Members" specifically to the Production workspace
- They can be given just enough permissions to:
- View flows and deployments
- Trigger flow runs
- View run history and logs
- This limited access doesn't count towards your full user quota in Prefect Cloud
3. Cost-Effective Setup:
- Prefect Cloud distinguishes between full users (your technical team) and viewers (non-technical users)
- Viewers have significantly reduced pricing compared to full users
- You only need to pay for full user licenses for your development team
- Non-technical users can be added as viewers at a lower cost
4. Best Practices:
- Use clear naming conventions for flows and deployments that non-technical users will interact with
- Consider creating a simple internal documentation page explaining how to trigger specific flows
- Use descriptive flow names and parameters that make sense to non-technical users
- Take advantage of the UI's scheduling features to allow non-technical users to schedule flow runs without needing to understand the technical details
5. Additional Security:
- You can further restrict access by creating custom roles (available in Enterprise tier)
- Consider setting up audit logging to track who triggers which flows
- Use parameters and validation to prevent non-technical users from accidentally inputting invalid values
This setup allows you to maintain a clear separation between development and production environments while giving non-technical users the ability to trigger flows when needed, all while managing costs effectively.
For specific pricing details regarding viewer access, I recommend reaching out to Prefect's sales team as pricing can vary based on your specific needs and scale.
Would you like me to provide more specific details about any of these aspects, such as how to set up specific roles or organize workspaces?