# Default permissions for built-in user roles ## Build Server {#DefaultPermissions-BuildServer} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | BuildInformationAdminister | Replace or delete build information | | BuildInformationPush | Create/update build information | | BuiltInFeedAdminister | Replace or delete packages in the built-in package repository | | BuiltInFeedDownload | Retrieve the contents of packages in the built-in package repository | | BuiltInFeedPush | Push new packages to the built-in package repository | | DeploymentCreate | Deploy releases to target environments | | DeploymentView | View deployments | | EnvironmentView | View environments | | FeedView | View package feeds and the packages in them | | LibraryVariableSetView | View library variable sets | | LifecycleView | View lifecycles | | ProcessView | View the deployment process and channels associated with a project | | ProjectView | View the details of projects | | ReleaseCreate | Create a release for a project | | ReleaseView | View a release of a project | | RunbookEdit | Edit runbooks | | RunbookRunCreate | Create runbook runs | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskView | View summary-level information associated with a task | | TenantView | View tenants | ## Certificate Manager {#DefaultPermissions-CertificateManager} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | CertificateCreate | Create certificates | | CertificateDelete | Delete certificates | | CertificateEdit | Edit certificates | | CertificateExportPrivateKey | Export certificate private-keys | | CertificateView | View certificates | | EnvironmentView | View environments | | TenantView | View tenants | ## Deployment Creator {#DefaultPermissions-DeploymentCreator} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | DeploymentCreate | Deploy releases to target environments | | DeploymentView | View deployments | | EnvironmentView | View environments | | LibraryVariableSetView | View library variable sets | | LifecycleView | View lifecycles | | ProcessView | View the deployment process and channels associated with a project | | ProjectView | View the details of projects | | ReleaseView | View a release of a project | | RunbookRunCreate | Create runbook runs | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskView | View summary-level information associated with a task | | TenantView | View tenants | ## Environment Manager {#DefaultPermissions-EnvironmentManager} | System Permission | Description | | --------------------------- | ---------------------------------------- | | TeamView | View teams | | Space Permission | Description | | --------------------------- | ---------------------------------------- | | AccountCreate | Create accounts | | AccountDelete | Delete accounts | | AccountEdit | Edit accounts | | AccountView | View accounts | | CertificateView | View certificates | | EnvironmentCreate | Create environments | | EnvironmentDelete | Delete environments | | EnvironmentEdit | Edit environments | | EnvironmentView | View environments | | MachineCreate | Create machines | | MachineDelete | Delete machines | | MachineEdit | Edit machines | | MachinePolicyCreate | Create health check policies | | MachinePolicyDelete | Delete health check policies | | MachinePolicyEdit | Edit health check policies | | MachinePolicyView | View health check policies | | MachineView | View machines | | ProxyCreate | Create proxies | | ProxyDelete | Delete proxies | | ProxyEdit | Edit proxies | | ProxyView | View proxies | | TaskCancel | Cancel server tasks | | TaskCreate | Explicitly create (run) server tasks | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | WorkerEdit | Edit workers and worker pools | | WorkerView | View the workers in worker pools | ## Environment Viewer {#DefaultPermissions-EnvironmentViewer} | System Permission | Description | | --------------------------- | ---------------------------------------- | | TeamView | View teams | | Space Permission | Description | | --------------------------- | ---------------------------------------- | | AccountView | View accounts | | CertificateView | View certificates | | EnvironmentView | View environments | | MachinePolicyView | View health check policies | | MachineView | View machines | | ProxyView | View proxies | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | WorkerView | View the workers in worker pools | ## Insights Report Manager {#DefaultPermissions-InsightsReportManager} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | EnvironmentView | View environments | | InsightsReportCreate | Create Insights reports | | InsightsReportDelete | Delete Insights reports | | InsightsReportEdit | Edit Insights reports | | InsightsReportView | View Insights reports | | ProcessView | View the deployment process and channels associated with a project | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | TenantView | View tenants | ## Package Publisher {#DefaultPermissions-PackagePublisher} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | BuildInformationAdminister | Replace or delete build information | | BuildInformationPush | Create/update build information | | BuiltInFeedAdminister | Replace or delete packages in the built-in package repository | | BuiltInFeedDownload | Retrieve the contents of packages in the built-in package repository | | BuiltInFeedPush | Push new packages to the built-in package repository | | FeedView | View package feeds and the packages in them | ## Project Contributor {#DefaultPermissions-ProjectContributor} | System Permission | Description | | --------------------------- | ---------------------------------------- | | TeamView | View teams | | UserRoleView | View other user's roles | | UserView | View users | | Space Permission | Description | | --------------------------- | ---------------------------------------- | | ActionTemplateCreate | Create step templates | | ActionTemplateDelete | Delete step templates | | ActionTemplateEdit | Edit step templates | | ActionTemplateView | View step templates | | ArtifactCreate | Manually create artifacts | | ArtifactView | View the artifacts created manually and during deployment | | CertificateView | View certificates | | DefectReport | Block a release from progressing to the next lifecycle phase | | DefectResolve | Unblock a release so it can progress to the next phase | | DeploymentView | View deployments | | EnvironmentView | View environments | | EventView | View Events, including access to the Audit screen | | FeedView | View package feeds and the packages in them | | InterruptionView | View interruptions generated during deployments | | InterruptionViewSubmitResponsible | Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team | | LibraryVariableSetCreate | Create library variable sets | | LibraryVariableSetDelete | Delete library variable sets | | LibraryVariableSetEdit | Edit library variable sets | | LibraryVariableSetView | View library variable sets | | LifecycleView | View lifecycles | | MachinePolicyView | View health check policies | | MachineView | View machines | | ProcessEdit | Edit the deployment process and channels associated with a project | | ProcessView | View the deployment process and channels associated with a project | | ProjectEdit | Edit project details | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | ReleaseView | View a release of a project | | RunbookEdit | Edit runbooks | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskCreate | Explicitly create (run) server tasks | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | TenantView | View tenants | | TriggerCreate | Create triggers | | TriggerDelete | Delete triggers | | TriggerEdit | Edit triggers | | TriggerView | View triggers | | VariableEdit | Edit variables belonging to a project | | VariableView | View variables belonging to a project or library variable set | ## Project Deployer {#DefaultPermissions-ProjectDeployer} | System Permission | Description | | --------------------------- | ---------------------------------------- | | TeamView | View teams | | UserRoleView | View other user's roles | | UserView | View users | | Space Permission | Description | | --------------------------- | ---------------------------------------- | | ActionTemplateCreate | Create step templates | | ActionTemplateDelete | Delete step templates | | ActionTemplateEdit | Edit step templates | | ActionTemplateView | View step templates | | ArtifactCreate | Manually create artifacts | | ArtifactView | View the artifacts created manually and during deployment | | CertificateView | View certificates | | DefectReport | Block a release from progressing to the next lifecycle phase | | DefectResolve | Unblock a release so it can progress to the next phase | | DeploymentCreate | Deploy releases to target environments | | DeploymentView | View deployments | | EnvironmentView | View environments | | EventView | View Events, including access to the Audit screen | | FeedView | View package feeds and the packages in them | | InterruptionSubmit | Take responsibility for and submit interruptions generated during deployments | | InterruptionView | View interruptions generated during deployments | | InterruptionViewSubmitResponsible | Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team | | LibraryVariableSetCreate | Create library variable sets | | LibraryVariableSetDelete | Delete library variable sets | | LibraryVariableSetEdit | Edit library variable sets | | LibraryVariableSetView | View library variable sets | | LifecycleView | View lifecycles | | MachinePolicyView | View health check policies | | MachineView | View machines | | ProcessEdit | Edit the deployment process and channels associated with a project | | ProcessView | View the deployment process and channels associated with a project | | ProjectEdit | Edit project details | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | ReleaseView | View a release of a project | | RunbookEdit | Edit runbooks | | RunbookRunCreate | Create runbook runs | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskCancel | Cancel server tasks | | TaskCreate | Explicitly create (run) server tasks | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | TenantView | View tenants | | TriggerCreate | Create triggers | | TriggerDelete | Delete triggers | | TriggerEdit | Edit triggers | | TriggerView | View triggers | | VariableEdit | Edit variables belonging to a project | | VariableView | View variables belonging to a project or library variable set | ## Project Initiator {#DefaultPermissions-ProjectInitiator} | System Permission | Description | | --------------------------- | ---------------------------------------- | | TeamView | View teams | | UserRoleView | View other user's roles | | UserView | View users | | Space Permission | Description | | --------------------------- | ---------------------------------------- | | ArtifactView | View the artifacts created manually and during deployment | | CertificateView | View certificates | | DefectReport | Block a release from progressing to the next lifecycle phase | | DefectResolve | Unblock a release so it can progress to the next phase | | DeploymentView | View deployments | | EnvironmentView | View environments | | EventView | View Events, including access to the Audit screen | | InterruptionView | View interruptions generated during deployments | | LibraryVariableSetView | View library variable sets | | LifecycleView | View lifecycles | | MachinePolicyView | View health check policies | | ProcessView | View the deployment process and channels associated with a project | | ProjectCreate | Create projects | | ProjectDelete | Delete projects | | ProjectEdit | Edit project details | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | ReleaseView | View a release of a project | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | TenantView | View tenants | | TriggerView | View triggers | ## Project Lead {#DefaultPermissions-ProjectLead} | System Permission | Description | | --------------------------- | ---------------------------------------- | | TeamView | View teams | | UserRoleView | View other user's roles | | UserView | View users | | Space Permission | Description | | --------------------------- | ---------------------------------------- | | ActionTemplateCreate | Create step templates | | ActionTemplateDelete | Delete step templates | | ActionTemplateEdit | Edit step templates | | ActionTemplateView | View step templates | | ArtifactCreate | Manually create artifacts | | ArtifactDelete | Delete artifacts | | ArtifactEdit | Edit the details describing artifacts | | ArtifactView | View the artifacts created manually and during deployment | | CertificateView | View certificates | | DefectReport | Block a release from progressing to the next lifecycle phase | | DefectResolve | Unblock a release so it can progress to the next phase | | DeploymentView | View deployments | | EnvironmentView | View environments | | EventView | View Events, including access to the Audit screen | | FeedView | View package feeds and the packages in them | | InterruptionView | View interruptions generated during deployments | | InterruptionViewSubmitResponsible | Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team | | LibraryVariableSetCreate | Create library variable sets | | LibraryVariableSetDelete | Delete library variable sets | | LibraryVariableSetEdit | Edit library variable sets | | LibraryVariableSetView | View library variable sets | | LifecycleView | View lifecycles | | MachinePolicyView | View health check policies | | MachineView | View machines | | ProcessEdit | Edit the deployment process and channels associated with a project | | ProcessView | View the deployment process and channels associated with a project | | ProjectEdit | Edit project details | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | ReleaseCreate | Create a release for a project | | ReleaseDelete | Delete a release of a project | | ReleaseEdit | Edit a release of a project | | ReleaseView | View a release of a project | | RunbookEdit | Edit runbooks | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskCreate | Explicitly create (run) server tasks | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | TenantView | View tenants | | TriggerCreate | Create triggers | | TriggerDelete | Delete triggers | | TriggerEdit | Edit triggers | | TriggerView | View triggers | | VariableEdit | Edit variables belonging to a project | | VariableView | View variables belonging to a project or library variable set | ## Project Viewer {#DefaultPermissions-ProjectViewer} | System Permission | Description | | --------------------------- | ---------------------------------------- | | TeamView | View teams | | UserRoleView | View other user's roles | | UserView | View users | | Space Permission | Description | | --------------------------- | ---------------------------------------- | | ArtifactView | View the artifacts created manually and during deployment | | CertificateView | View certificates | | DeploymentView | View deployments | | EnvironmentView | View environments | | EventView | View Events, including access to the Audit screen | | InterruptionView | View interruptions generated during deployments | | LibraryVariableSetView | View library variable sets | | LifecycleView | View lifecycles | | MachinePolicyView | View health check policies | | ProcessView | View the deployment process and channels associated with a project | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | ReleaseView | View a release of a project | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | TenantView | View tenants | | TriggerView | View triggers | ## Release Creator {#DefaultPermissions-ReleaseCreator} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | EnvironmentView | View environments | | FeedView | View package feeds and the packages in them | | ProcessView | View the deployment process and channels associated with a project | | ProjectView | View the details of projects | | ReleaseCreate | Create a release for a project | | ReleaseView | View a release of a project | | RunbookEdit | Edit runbooks | | RunbookView | View runbooks | ## Runbook Consumer {#DefaultPermissions-RunbookConsumer} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | ArtifactView | View the artifacts created manually and during deployment | | CertificateView | View certificates | | EnvironmentView | View environments | | EventView | View Events, including access to the Audit screen | | FeedView | View package feeds and the packages in them | | InterruptionView | View interruptions generated during deployments | | LibraryVariableSetView | View library variable sets | | MachinePolicyView | View health check policies | | MachineView | View machines | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | RunbookRunCreate | Create runbook runs | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | TenantView | View tenants | | TriggerView | View triggers | ## Runbook Producer {#DefaultPermissions-RunbookProducer} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | ActionTemplateCreate | Create step templates | | ActionTemplateDelete | Delete step templates | | ActionTemplateEdit | Edit step templates | | ActionTemplateView | View step templates | | ArtifactCreate | Manually create artifacts | | ArtifactDelete | Delete artifacts | | ArtifactEdit | Edit the details describing artifacts | | ArtifactView | View the artifacts created manually and during deployment | | CertificateView | View certificates | | EnvironmentView | View environments | | EventView | View Events, including access to the Audit screen | | FeedView | View package feeds and the packages in them | | InterruptionSubmit | Take responsibility for and submit interruptions generated during deployments | | InterruptionView | View interruptions generated during deployments | | InterruptionViewSubmitResponsible | Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team | | LibraryVariableSetCreate | Create library variable sets | | LibraryVariableSetDelete | Delete library variable sets | | LibraryVariableSetEdit | Edit library variable sets | | LibraryVariableSetView | View library variable sets | | LifecycleView | View lifecycles | | MachinePolicyView | View health check policies | | MachineView | View machines | | ProjectCreate | Create projects | | ProjectDelete | Delete projects | | ProjectEdit | Edit project details | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | RunbookEdit | Edit runbooks | | RunbookRunCreate | Create runbook runs | | RunbookRunDelete | Delete runbook runs | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | TaskCancel | Cancel server tasks | | TaskCreate | Explicitly create (run) server tasks | | TaskView | View summary-level information associated with a task | | TeamView | View teams | | TenantView | View tenants | | TriggerCreate | Create triggers | | TriggerDelete | Delete triggers | | TriggerEdit | Edit triggers | | TriggerView | View triggers | | VariableEdit | Edit variables belonging to a project | | VariableView | View variables belonging to a project or library variable set | ## Space Manager {#DefaultPermissions-SpaceManager} | System Permission | Description | | --------------------------- | ---------------------------------------- | | TeamView | View teams | | UserRoleView | View other user's roles | | UserView | View users | | Space Permission | Description | | --------------------------- | ---------------------------------------- | | AccountCreate | Create accounts | | AccountDelete | Delete accounts | | AccountEdit | Edit accounts | | AccountView | View accounts | | ActionTemplateCreate | Create step templates | | ActionTemplateDelete | Delete step templates | | ActionTemplateEdit | Edit step templates | | ActionTemplateView | View step templates | | ArtifactCreate | Manually create artifacts | | ArtifactDelete | Delete artifacts | | ArtifactEdit | Edit the details describing artifacts | | ArtifactView | View the artifacts created manually and during deployment | | BuildInformationAdminister | Replace or delete build information | | BuildInformationPush | Create/update build information | | BuiltInFeedAdminister | Replace or delete packages in the built-in package repository | | BuiltInFeedDownload | Retrieve the contents of packages in the built-in package repository | | BuiltInFeedPush | Push new packages to the built-in package repository | | CertificateCreate | Create certificates | | CertificateDelete | Delete certificates | | CertificateEdit | Edit certificates | | CertificateExportPrivateKey | Export certificate private-keys | | CertificateView | View certificates | | DefectReport | Block a release from progressing to the next lifecycle phase | | DefectResolve | Unblock a release so it can progress to the next phase | | DeploymentCreate | Deploy releases to target environments | | DeploymentDelete | Delete deployments | | DeploymentView | View deployments | | EnvironmentCreate | Create environments | | EnvironmentDelete | Delete environments | | EnvironmentEdit | Edit environments | | EnvironmentView | View environments | | EventView | View Events, including access to the Audit screen | | FeedEdit | Edit feeds | | FeedView | View package feeds and the packages in them | | GitCredentialEdit | Edit Git credentials | | GitCredentialView | View Git credentials | | InterruptionSubmit | Take responsibility for and submit interruptions generated during deployments | | InterruptionView | View interruptions generated during deployments | | InterruptionViewSubmitResponsible | Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team | | LibraryVariableSetCreate | Create library variable sets | | LibraryVariableSetDelete | Delete library variable sets | | LibraryVariableSetEdit | Edit library variable sets | | LibraryVariableSetView | View library variable sets | | LifecycleCreate | Create lifecycles | | LifecycleDelete | Delete lifecycles | | LifecycleEdit | Edit lifecycles | | LifecycleView | View lifecycles | | MachineCreate | Create machines | | MachineDelete | Delete machines | | MachineEdit | Edit machines | | MachinePolicyCreate | Create health check policies | | MachinePolicyDelete | Delete health check policies | | MachinePolicyEdit | Edit health check policies | | MachinePolicyView | View health check policies | | MachineView | View machines | | ProcessEdit | Edit the deployment process and channels associated with a project | | ProcessView | View the deployment process and channels associated with a project | | ProjectCreate | Create projects | | ProjectDelete | Delete projects | | ProjectEdit | Edit project details | | ProjectGroupCreate | Create project groups | | ProjectGroupDelete | Delete project groups | | ProjectGroupEdit | Edit project groups | | ProjectGroupView | View project groups | | ProjectView | View the details of projects | | ProxyCreate | Create proxies | | ProxyDelete | Delete proxies | | ProxyEdit | Edit proxies | | ProxyView | View proxies | | ReleaseCreate | Create a release for a project | | ReleaseDelete | Delete a release of a project | | ReleaseEdit | Edit a release of a project | | ReleaseView | View a release of a project | | RunbookEdit | Edit runbooks | | RunbookRunCreate | Create runbook runs | | RunbookRunDelete | Delete runbook runs | | RunbookRunView | View runbook runs | | RunbookView | View runbooks | | SubscriptionCreate | Create subscriptions | | SubscriptionDelete | Delete subscriptions | | SubscriptionEdit | Edit subscriptions | | SubscriptionView | View subscriptions | | TagSetCreate | Create tag sets | | TagSetDelete | Delete tag sets | | TagSetEdit | Edit tag sets | | TaskCancel | Cancel server tasks | | TaskCreate | Explicitly create (run) server tasks | | TaskEdit | Edit server tasks | | TaskView | View summary-level information associated with a task | | TeamCreate | Create teams | | TeamDelete | Delete teams | | TeamEdit | Edit teams | | TeamView | View teams | | TenantCreate | Create tenants | | TenantDelete | Delete tenants | | TenantEdit | Edit tenants | | TenantView | View tenants | | TriggerCreate | Create triggers | | TriggerDelete | Delete triggers | | TriggerEdit | Edit triggers | | TriggerView | View triggers | | VariableEdit | Edit variables belonging to a project | | VariableEditUnscoped | Edit non-environment scoped variables belonging to a project or library variable set | | VariableView | View variables belonging to a project or library variable set | | VariableViewUnscoped | View non-environment scoped variables belonging to a project or library variable set | | WorkerEdit | Edit workers and worker pools | | WorkerView | View the workers in worker pools | ## System Administrator {#DefaultPermissions-SystemAdministrator} | System Permission | Description | |----------------------|------------------------------------------------------------------------------------------------------------------------------------------| | AdministerSystem | Perform system-level functions like configuring HTTP web hosting, the public URL, server nodes, maintenance mode, and server diagnostics | | ConfigureServer | Configure server settings like Authentication, SMTP, and HTTP Security Headers | | EventRetentionDelete | Delete archived event files | | EventRetentionView | View/list archived event files | | EventView | View Events, including access to the Audit screen | | PlatformHubEdit | Edit Platform Hub configuration and resources | | PlatformHubView | View Platform Hub configuration and resources | | SpaceCreate | Create spaces | | SpaceDelete | Delete spaces | | SpaceEdit | Edit spaces | | SpaceView | View spaces | | TaskCancel | Cancel server tasks | | TaskCreate | Explicitly create (run) server tasks | | TaskEdit | Edit server tasks | | TaskView | View summary-level information associated with a task | | TeamCreate | Create teams | | TeamDelete | Delete teams | | TeamEdit | Edit teams | | TeamView | View teams | | UserEdit | Edit users | | UserInvite | Invite users to register accounts | | UserRoleEdit | Edit user role definitions | | UserRoleView | View other user's roles | | UserView | View users | ## System Manager {#DefaultPermissions-SystemManager} | System Permission | Description | |----------------------|--------------------------------------------------------------------------------| | ConfigureServer | Configure server settings like Authentication, SMTP, and HTTP Security Headers | | EventRetentionDelete | Delete archived event files | | EventRetentionView | View/list archived event files | | EventView | View Events, including access to the Audit screen | | PlatformHubEdit | Edit Platform Hub configuration and resources | | PlatformHubView | View Platform Hub configuration and resources | | SpaceCreate | Create spaces | | SpaceDelete | Delete spaces | | SpaceEdit | Edit spaces | | SpaceView | View spaces | | TaskCancel | Cancel server tasks | | TaskCreate | Explicitly create (run) server tasks | | TaskEdit | Edit server tasks | | TaskView | View summary-level information associated with a task | | TeamCreate | Create teams | | TeamDelete | Delete teams | | TeamEdit | Edit teams | | TeamView | View teams | | UserEdit | Edit users | | UserInvite | Invite users to register accounts | | UserRoleEdit | Edit user role definitions | | UserRoleView | View other user's roles | | UserView | View users | ## Tenant Manager {#DefaultPermissions-TenantManager} | Space Permission | Description | | --------------------------- | ---------------------------------------- | | TenantCreate | Create tenants | | TenantDelete | Delete tenants | | TenantEdit | Edit tenants | | TenantView | View tenants |