Cloud Foundry has an elaborate role-based access control (RBAC) for managing the applications and its various resources:
- Org: This represents an organization, to which multiple users can be bound. An org shares the applications, service availability, resource quota, and plans.
- User account: The user account represents an individual login that can act on the applications or operations in cloud foundry.
- Space: Every application or service runs in a space that is bound to org and managed by a user account. An org has at least one space.
- Roles and permissions: The users belonging to org have roles which can do restricted actions (or permissions). The details are documented at: https://docs.cloudfoundry.org/concepts/roles.html ...