# Feature Request: Least Privilege Collaboration

## post by dan1 on Jun 8

Hello,

Curious to have your thoughts on a new role that helps lambda customers adhere to the principle of least privilege. The idea is that a “Collaborator” team member can log in at lambda.ai and use resources in their purview, and is unable to create or destroy any resources.

The scenario I have in mind is that a team of ML engineers use Lambda.ai for their work, and a subset of them are authorized to allocate resources and cause money to be spent. For example, if I’m a Collaborator, I am able to see resources in my assigned workspace and open Jupyter, but I am unable to create an instance or a cluster.

The Lambda docs call out the coarse nature of the current approach with a warning:

> **Be sure to invite only trusted persons to your account!**  
> Currently, all user roles have permission to create, update, and delete Lambda Cloud resources.

This is a tough pill to swallow. Would you agree it makes sense to have a 3rd role to enable collaboration without opening the door to accidental or unauthorized infrastructure changes? A role like this would help customers adhere to the principle of least privilege.

Certainly I can share SSH keys, but that has its own set of problems. Alternatively, if there’s another way to provide Jupyter access on a running instance to a my team member without a lambda.ai account, I would like to hear about it.

Thank you,

Daniel

86 views

### Related topics

| Topic | Replies | Views | Activity |
| --- | --- | --- | --- |
| [Remote access of lambda workstation by multiple users](https://deeptalk.lambda.ai/t/remote-access-of-lambda-workstation-by-multiple-users/1261)<br>[Technical Help](https://deeptalk.lambda.ai/c/ti/10) | [0](https://deeptalk.lambda.ai/t/remote-access-of-lambda-workstation-by-multiple-users/1261/1) | 1.6k | [Oct 2019](https://deeptalk.lambda.ai/t/remote-access-of-lambda-workstation-by-multiple-users/1261/1) |
| [How to Enable Inter-Instance Communication or Set Up a Custom Cluster on Lambda Labs?](https://deeptalk.lambda.ai/t/how-to-enable-inter-instance-communication-or-set-up-a-custom-cluster-on-lambda-labs/4422)<br>[Technical Help](https://deeptalk.lambda.ai/c/ti/10) | [0](https://deeptalk.lambda.ai/t/how-to-enable-inter-instance-communication-or-set-up-a-custom-cluster-on-lambda-labs/4422/1) | 90 | [Dec 2024](https://deeptalk.lambda.ai/t/how-to-enable-inter-instance-communication-or-set-up-a-custom-cluster-on-lambda-labs/4422/1) |
| [How do I set a spend limit on Lambda Cloud?](https://deeptalk.lambda.ai/t/how-do-i-set-a-spend-limit-on-lambda-cloud/4121)<br>[Technical Help](https://deeptalk.lambda.ai/c/ti/10) | [1](https://deeptalk.lambda.ai/t/how-do-i-set-a-spend-limit-on-lambda-cloud/4121/1) | 989 | [Mar 2024](https://deeptalk.lambda.ai/t/how-do-i-set-a-spend-limit-on-lambda-cloud/4121/2) |
| [Is Lambda Stack free for use on non-LambdaLabs computers](https://deeptalk.lambda.ai/t/is-lambda-stack-free-for-use-on-non-lambdalabs-computers/4416) | [1](https://deeptalk.lambda.ai/t/is-lambda-stack-free-for-use-on-non-lambdalabs-computers/4416/1) | 247 | [Nov 2024](https://deeptalk.lambda.ai/t/is-lambda-stack-free-for-use-on-non-lambdalabs-computers/4416/2) |
| [Preloading money into my Lambda account](https://deeptalk.lambda.ai/t/preloading-money-into-my-lambda-account/4808) | [0](https://deeptalk.lambda.ai/t/preloading-money-into-my-lambda-account/4808/1) | 127 | [Apr 8](https://deeptalk.lambda.ai/t/preloading-money-into-my-lambda-account/4808/1) |