No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Hey, I've noticed that our non-admin users are unable to create their own environments (this differs from how stacks are created where any user can create their own). My question is how do we allow people to create their own environments without having to give them write access across everything?

Hi, non-admin users should be able to create their own environments. How are they attempting to create the environments? Are they running into any errors?

might it be that they are trying to do it in the default project?

I am able to clone into the default project though :thinking_face:

I looked into this - when cloning an environment, a user must have "Open" permissions on the source environment.

Ah that would do it. Bit of a footgun if it doesn’t have secrets :sweat_smile: .

Yah, the main reason is because "Read" permissions doesn't allow one to view resolved values like Secrets, and allowing a clone would bypass that. As a workaround, if the user has "Read" permissions and it doesn't have secrets, they can easily copy over the environment definition