Can I disable or restrict the "Discard Run" action in Spacelift?

Currently, there is no way to completely disable the "Discard Run" action in Spacelift, even for admin users. The ability to discard runs is tied to stack-admin privileges and cannot be removed through RBAC settings, organization/space-level configurations, or policies.

Alternative approaches to minimize discard usage

While you cannot disable the discard functionality entirely, here are several strategies to reduce the need for manual discards and control who can perform them:

1. Use custom RBAC roles and Spaces

Implement tightly scoped RBAC roles within Spaces to limit who has admin or maintainer privileges. This reduces the number of users who can trigger discards, minimizing the risk of accidental or unauthorized cancellations.

2. Implement Approval Policies

Add Approval Policies to ensure that applies cannot proceed without human confirmation. This creates a controlled checkpoint where destructive or unwanted plans can be caught before reaching the apply stage, reducing the need for manual discards.

3. Configure Push Policies

Use Push Policies to automatically discard obsolete runs when new commits arrive. This keeps your pipelines clean and eliminates the manual discard use case entirely by handling run management automatically.

Important note about Stack Policies

Stack Policies (the older Access Policies) have been deprecated and replaced with Spaces and role-based access controls. Use these modern approaches for managing access and permissions in your Spacelift organization.