Create and manage a team

Table of contents

You can create teams for your organization in Docker Hub and the Docker Admin Console. You can configure repository access for a team in Docker Hub.

A team is a group of Docker users that belong to an organization. An organization can have multiple teams. An organization owner can then create new teams and add members to an existing team using their Docker ID or email address and by selecting a team the user should be part of. Members aren't required to be part of a team to be associated with an organization.

The organization owner can add additional organization owners to help them manage users, teams, and repositories in the organization by assigning them the owner role.

Organization owner

An organization owner is an administrator who has the following permissions:

Manage repositories and add team members to the organization.
Access private repositories, all teams, billing information, and organization settings.
Specify permissions for each team in the organization.
Enable SSO for the organization.

When SSO is enabled for your organization, the organization owner can also manage users. Docker can auto-provision Docker IDs for new end-users or users who'd like to have a separate Docker ID for company use through SSO enforcement.

The organization owner can also add additional organization owners to help them manage users, teams, and repositories in the organization.

Create a team

Sign in to Docker Hub.
Select Organizations and choose your organization.
Select the Teams tab and then select Create Team.
Fill out your team's information and select Create.
Add members to your team.

Early Access

The Docker Admin Console is an early access product.

It's available to all company owners and organization owners. You can still manage organizations in Docker Hub, but the Admin Console includes company-level management and enhanced features for organization management.

In Admin Console, select your organization.
In the User management section, select Teams.
Select Create team.
Fill out your team's information and select Create.
Add members to your team.

Configure repository permissions for a team

Organization owners can configure repository permissions on a per-team basis. For example, you can specify that all teams within an organization have "Read and Write" access to repositories A and B, whereas only specific teams have "Admin" access. Note that organization owners have full administrative access to all repositories within the organization.

To give a team access to a repository:

Sign in to Docker Hub.
Select Organizations and choose your organization.
Select the Teams tab and select the team that you'd like to configure repository access to.
Select the Permissions tab and select a repository from the Repository drop-down.
Choose a permission from the Permissions drop-down list and select Add.

Organization owners can also assign members the editor role to grant partial administrative access. See Roles and permissions for more about the editor role.

Permissions reference

Read-only access lets users view, search, and pull a private repository in the same way as they can a public repository.
Read & Write access lets users pull, push, and view a repository. In addition, it lets users view, cancel, retry or trigger builds
Admin access lets users pull, push, view, edit, and delete a repository. You can also edit build settings, and update the repositories description, collaborators rights, public/private visibility, and delete.

Permissions are cumulative. For example, if you have "Read & Write" permissions, you automatically have "Read-only" permissions:

Action	Read-only	Read & Write	Admin
Pull a Repository	✅	✅	✅
View a Repository	✅	✅	✅
Push a Repository	❌	✅	✅
Edit a Repository	❌	❌	✅
Delete a Repository	❌	❌	✅
Update a Repository Description	❌	❌	✅
View Builds	✅	✅	✅
Cancel Builds	❌	✅	✅
Retry Builds	❌	✅	✅
Trigger Builds	❌	✅	✅
Edit Build Settings	❌	❌	✅

Note
A user who hasn't verified their email address only has Read-only access to the repository, regardless of the rights their team membership has given them.

View a team's permissions for all repositories

To view a team's permissions across all repositories:

Sign in to Docker Hub.
Select Organizations and choose your organization.
Select Teams and choose your team name.
Select the Permissions tab, where you can view the repositories this team can access.

Delete a team

Organization owners can delete a team in Docker Hub or Admin Console. When you remove a team from your organization, this action revokes the members' access to the team's permitted resources. It won't remove users from other teams that they belong to, nor will it delete any resources.

Sign in to Docker Hub.
Select Organizations and choose your organization.
Select the Teams tab.
Select the name of the team that you want to delete.
Select Settings.
Select Delete Team.
Review the confirmation message, then select Delete.