# TiDB Cloud Administrator Authorization - Project Level

+ At the project level, TiDB Cloud defines 3 roles

| Permission                                                                            | `Owner` | `Data Access Read-Write` | `Data Access Read-Only` |
| :------------------------------------------------------------------------------------ | :------ | :----------------------- | :---------------------- |
| Manage project settings                                                               | Yes     | No                       | No                      |
| Invite users to or remove users from a project and edit project roles of users.       | Yes     | No                       | No                      |
| Manage database audit logging of the project.                                         | Yes     | No                       | No                      |
| Manage spending limit for all `TiDB Serverless` clusters in the project.              | Yes     | No                       | No                      |
| Manage cluster operations in the project.                                             | Yes     | No                       | No                      |
| Manage branches for `TiDB Serverless` clusters in the project.                        | Yes     | No                       | No                      |
| Manage cluster data such as data import, data backup and restore, and data migration. | Yes     | Yes                      | No                      |
| Manage Data Service for data read-only operations.                                    | Yes     | Yes                      | Yes                     |
| Manage Data Service for data read and write operations.                               | Yes     | Yes                      | No                      |
| View cluster data using `Chat2Query`.                                                 | Yes     | Yes                      | Yes                     |
| Modify and delete cluster data using `Chat2Query`.                                    | Yes     | Yes                      | No                      |
| View clusters in the project, view cluster backup records, and manage `changefeeds`.  | Yes     | Yes                      | Yes                     |

--------------------------------------------------------------------------------------------------------------------------------------------------
[No Notes]