Default permissions for built-in user roles

Build Server

Space Permission Description
BuildInformationAdminister Replace or delete build information
BuildInformationPush Create/update build information
BuiltInFeedAdminister Replace or delete packages in the built-in package repository
BuiltInFeedDownload Retrieve the contents of packages in the built-in package repository
BuiltInFeedPush Push new packages to the built-in package repository
DeploymentCreate Deploy releases to target environments
DeploymentView View deployments
EnvironmentView View environments
FeedView View package feeds and the packages in them
LibraryVariableSetView View library variable sets
LifecycleView View lifecycles
ProcessView View the deployment process and channels associated with a project
ProjectView View the details of projects
ReleaseCreate Create a release for a project
ReleaseView View a release of a project
RunbookRunCreate Create runbook runs
RunbookRunView View runbook runs
RunbookSnapshotCreate Create runbook snapshots
RunbookView View runbooks
TaskView View summary-level information associated with a task
TenantView View tenants

Certificate Manager

Space Permission Description
CertificateCreate Create certificates
CertificateDelete Delete certificates
CertificateEdit Edit certificates
CertificateExportPrivateKey Export certificate private-keys
CertificateView View certificates
EnvironmentView View environments
TenantView View tenants

Deployment Creator

Space Permission Description
DeploymentCreate Deploy releases to target environments
DeploymentView View deployments
EnvironmentView View environments
LibraryVariableSetView View library variable sets
LifecycleView View lifecycles
ProcessView View the deployment process and channels associated with a project
ProjectView View the details of projects
ReleaseView View a release of a project
RunbookRunCreate Create runbook runs
RunbookRunView View runbook runs
RunbookView View runbooks
TaskView View summary-level information associated with a task
TenantView View tenants

Environment Manager

System Permission Description
TeamView View teams
Space Permission Description
AccountCreate Create accounts
AccountDelete Delete accounts
AccountEdit Edit accounts
AccountView View accounts
CertificateView View certificates
EnvironmentCreate Create environments
EnvironmentDelete Delete environments
EnvironmentEdit Edit environments
EnvironmentView View environments
MachineCreate Create machines
MachineDelete Delete machines
MachineEdit Edit machines
MachinePolicyCreate Create health check policies
MachinePolicyDelete Delete health check policies
MachinePolicyEdit Edit health check policies
MachinePolicyView View health check policies
MachineView View machines
ProxyCreate Create proxies
ProxyDelete Delete proxies
ProxyEdit Edit proxies
ProxyView View proxies
TaskCancel Cancel server tasks
TaskCreate Explicitly create (run) server tasks
TaskView View summary-level information associated with a task
TeamView View teams
WorkerEdit Edit workers and worker pools
WorkerView View the workers in worker pools

Environment Viewer

System Permission Description
TeamView View teams
Space Permission Description
AccountView View accounts
CertificateView View certificates
EnvironmentView View environments
MachinePolicyView View health check policies
MachineView View machines
ProxyView View proxies
TaskView View summary-level information associated with a task
TeamView View teams
WorkerView View the workers in worker pools

Insights Report Manager

Space Permission Description
EnvironmentView View environments
InsightsReportCreate Create Insights reports
InsightsReportDelete Delete Insights reports
InsightsReportEdit Edit Insights reports
InsightsReportView View Insights reports
ProcessView View the deployment process and channels associated with a project
ProjectGroupView View project groups
ProjectView View the details of projects
TenantView View tenants

Package Publisher

Space Permission Description
BuildInformationAdminister Replace or delete build information
BuildInformationPush Create/update build information
BuiltInFeedAdminister Replace or delete packages in the built-in package repository
BuiltInFeedDownload Retrieve the contents of packages in the built-in package repository
BuiltInFeedPush Push new packages to the built-in package repository
FeedView View package feeds and the packages in them

Project Contributor

System Permission Description
SshKnownHostsView View SSH known hosts
TeamView View teams
UserRoleView View other user’s roles
UserView View users
Space Permission Description
ActionTemplateCreate Create step templates
ActionTemplateDelete Delete step templates
ActionTemplateEdit Edit step templates
ActionTemplateView View step templates
ArtifactCreate Manually create artifacts
ArtifactView View the artifacts created manually and during deployment
CertificateView View certificates
DefectReport Block a release from progressing to the next lifecycle phase
DefectResolve Unblock a release so it can progress to the next phase
DeploymentView View deployments
EnvironmentView View environments
EventView View Events, including access to the Audit screen
FeedView View package feeds and the packages in them
InterruptionView View interruptions generated during deployments
InterruptionViewSubmitResponsible Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team
LibraryVariableSetCreate Create library variable sets
LibraryVariableSetDelete Delete library variable sets
LibraryVariableSetEdit Edit library variable sets
LibraryVariableSetView View library variable sets
LifecycleView View lifecycles
MachinePolicyView View health check policies
MachineView View machines
ProcessEdit Edit the deployment process and channels associated with a project
ProcessView View the deployment process and channels associated with a project
ProjectEdit Edit project details
ProjectGroupView View project groups
ProjectView View the details of projects
ReleaseView View a release of a project
RunbookEdit Edit runbooks
RunbookRunView View runbook runs
RunbookSnapshotCreate Create runbook snapshots
RunbookView View runbooks
TaskCreate Explicitly create (run) server tasks
TaskView View summary-level information associated with a task
TeamView View teams
TenantView View tenants
TriggerCreate Create triggers
TriggerDelete Delete triggers
TriggerEdit Edit triggers
TriggerView View triggers
VariableEdit Edit variables belonging to a project
VariableView View variables belonging to a project or library variable set

Project Deployer

System Permission Description
TeamView View teams
UserRoleView View other user’s roles
UserView View users
Space Permission Description
ActionTemplateCreate Create step templates
ActionTemplateDelete Delete step templates
ActionTemplateEdit Edit step templates
ActionTemplateView View step templates
ArtifactCreate Manually create artifacts
ArtifactView View the artifacts created manually and during deployment
CertificateView View certificates
DefectReport Block a release from progressing to the next lifecycle phase
DefectResolve Unblock a release so it can progress to the next phase
DeploymentCreate Deploy releases to target environments
DeploymentView View deployments
EnvironmentView View environments
EventView View Events, including access to the Audit screen
FeedView View package feeds and the packages in them
InterruptionSubmit Take responsibility for and submit interruptions generated during deployments
InterruptionView View interruptions generated during deployments
InterruptionViewSubmitResponsible Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team
LibraryVariableSetCreate Create library variable sets
LibraryVariableSetDelete Delete library variable sets
LibraryVariableSetEdit Edit library variable sets
LibraryVariableSetView View library variable sets
LifecycleView View lifecycles
MachinePolicyView View health check policies
MachineView View machines
ProcessEdit Edit the deployment process and channels associated with a project
ProcessView View the deployment process and channels associated with a project
ProjectEdit Edit project details
ProjectGroupView View project groups
ProjectView View the details of projects
ReleaseView View a release of a project
RunbookEdit Edit runbooks
RunbookRunCreate Create runbook runs
RunbookRunView View runbook runs
RunbookSnapshotCreate Create runbook snapshots
RunbookView View runbooks
TaskCancel Cancel server tasks
TaskCreate Explicitly create (run) server tasks
TaskView View summary-level information associated with a task
TeamView View teams
TenantView View tenants
TriggerCreate Create triggers
TriggerDelete Delete triggers
TriggerEdit Edit triggers
TriggerView View triggers
VariableEdit Edit variables belonging to a project
VariableView View variables belonging to a project or library variable set

Project Initiator

System Permission Description
SshKnownHostsView View SSH known hosts
TeamView View teams
UserRoleView View other user’s roles
UserView View users
Space Permission Description
ArtifactView View the artifacts created manually and during deployment
CertificateView View certificates
DefectReport Block a release from progressing to the next lifecycle phase
DefectResolve Unblock a release so it can progress to the next phase
DeploymentView View deployments
EnvironmentView View environments
EventView View Events, including access to the Audit screen
InterruptionView View interruptions generated during deployments
LibraryVariableSetView View library variable sets
LifecycleView View lifecycles
MachinePolicyView View health check policies
ProcessView View the deployment process and channels associated with a project
ProjectCreate Create projects
ProjectDelete Delete projects
ProjectEdit Edit project details
ProjectGroupView View project groups
ProjectView View the details of projects
ReleaseView View a release of a project
RunbookRunView View runbook runs
RunbookView View runbooks
TaskView View summary-level information associated with a task
TeamView View teams
TenantView View tenants
TriggerView View triggers

Project Lead

System Permission Description
TeamView View teams
UserRoleView View other user’s roles
UserView View users
Space Permission Description
ActionTemplateCreate Create step templates
ActionTemplateDelete Delete step templates
ActionTemplateEdit Edit step templates
ActionTemplateView View step templates
ArtifactCreate Manually create artifacts
ArtifactDelete Delete artifacts
ArtifactEdit Edit the details describing artifacts
ArtifactView View the artifacts created manually and during deployment
CertificateView View certificates
DefectReport Block a release from progressing to the next lifecycle phase
DefectResolve Unblock a release so it can progress to the next phase
DeploymentView View deployments
EnvironmentView View environments
EventView View Events, including access to the Audit screen
FeedView View package feeds and the packages in them
InterruptionView View interruptions generated during deployments
InterruptionViewSubmitResponsible Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team
LibraryVariableSetCreate Create library variable sets
LibraryVariableSetDelete Delete library variable sets
LibraryVariableSetEdit Edit library variable sets
LibraryVariableSetView View library variable sets
LifecycleView View lifecycles
MachinePolicyView View health check policies
MachineView View machines
ProcessEdit Edit the deployment process and channels associated with a project
ProcessView View the deployment process and channels associated with a project
ProjectEdit Edit project details
ProjectGroupView View project groups
ProjectView View the details of projects
ReleaseCreate Create a release for a project
ReleaseDelete Delete a release of a project
ReleaseEdit Edit a release of a project
ReleaseView View a release of a project
RunbookEdit Edit runbooks
RunbookRunView View runbook runs
RunbookSnapshotCreate Create runbook snapshots
RunbookView View runbooks
TaskCreate Explicitly create (run) server tasks
TaskView View summary-level information associated with a task
TeamView View teams
TenantView View tenants
TriggerCreate Create triggers
TriggerDelete Delete triggers
TriggerEdit Edit triggers
TriggerView View triggers
VariableEdit Edit variables belonging to a project
VariableView View variables belonging to a project or library variable set

Project Viewer

System Permission Description
TeamView View teams
UserRoleView View other user’s roles
UserView View users
Space Permission Description
ArtifactView View the artifacts created manually and during deployment
CertificateView View certificates
DeploymentView View deployments
EnvironmentView View environments
EventView View Events, including access to the Audit screen
InterruptionView View interruptions generated during deployments
LibraryVariableSetView View library variable sets
LifecycleView View lifecycles
MachinePolicyView View health check policies
ProcessView View the deployment process and channels associated with a project
ProjectGroupView View project groups
ProjectView View the details of projects
ReleaseView View a release of a project
RunbookRunView View runbook runs
RunbookView View runbooks
TaskView View summary-level information associated with a task
TeamView View teams
TenantView View tenants
TriggerView View triggers

Release Creator

Space Permission Description
EnvironmentView View environments
FeedView View package feeds and the packages in them
ProcessView View the deployment process and channels associated with a project
ProjectView View the details of projects
ReleaseCreate Create a release for a project
ReleaseView View a release of a project
RunbookEdit Edit runbooks
RunbookSnapshotCreate Create runbook snapshots
RunbookView View runbooks

Runbook Consumer

Space Permission Description
ArtifactView View the artifacts created manually and during deployment
CertificateView View certificates
EnvironmentView View environments
EventView View Events, including access to the Audit screen
FeedView View package feeds and the packages in them
InterruptionView View interruptions generated during deployments
LibraryVariableSetView View library variable sets
MachinePolicyView View health check policies
MachineView View machines
ProjectGroupView View project groups
ProjectView View the details of projects
RunbookRunCreate Create runbook runs
RunbookRunView View runbook runs
RunbookView View runbooks
TaskView View summary-level information associated with a task
TeamView View teams
TenantView View tenants
TriggerView View triggers

Runbook Producer

Space Permission Description
ActionTemplateCreate Create step templates
ActionTemplateDelete Delete step templates
ActionTemplateEdit Edit step templates
ActionTemplateView View step templates
ArtifactCreate Manually create artifacts
ArtifactDelete Delete artifacts
ArtifactEdit Edit the details describing artifacts
ArtifactView View the artifacts created manually and during deployment
CertificateView View certificates
EnvironmentView View environments
EventView View Events, including access to the Audit screen
FeedView View package feeds and the packages in them
InterruptionSubmit Take responsibility for and submit interruptions generated during deployments
InterruptionView View interruptions generated during deployments
InterruptionViewSubmitResponsible Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team
LibraryVariableSetCreate Create library variable sets
LibraryVariableSetDelete Delete library variable sets
LibraryVariableSetEdit Edit library variable sets
LibraryVariableSetView View library variable sets
LifecycleView View lifecycles
MachinePolicyView View health check policies
MachineView View machines
ProjectCreate Create projects
ProjectDelete Delete projects
ProjectEdit Edit project details
ProjectGroupView View project groups
ProjectView View the details of projects
RunbookEdit Edit runbooks
RunbookRunCreate Create runbook runs
RunbookRunDelete Delete runbook runs
RunbookRunView View runbook runs
RunbookSnapshotCreate Create runbook snapshots
RunbookView View runbooks
TaskCancel Cancel server tasks
TaskCreate Explicitly create (run) server tasks
TaskView View summary-level information associated with a task
TeamView View teams
TenantView View tenants
TriggerCreate Create triggers
TriggerDelete Delete triggers
TriggerEdit Edit triggers
TriggerView View triggers
VariableEdit Edit variables belonging to a project
VariableView View variables belonging to a project or library variable set

Space Manager

System Permission Description
SshKnownHostsAdminister Add, edit, and remove SSH known hosts
SshKnownHostsView View SSH known hosts
TeamView View teams
UserRoleView View other user’s roles
UserView View users
Space Permission Description
AccountCreate Create accounts
AccountDelete Delete accounts
AccountEdit Edit accounts
AccountView View accounts
ActionTemplateCreate Create step templates
ActionTemplateDelete Delete step templates
ActionTemplateEdit Edit step templates
ActionTemplateView View step templates
ArtifactCreate Manually create artifacts
ArtifactDelete Delete artifacts
ArtifactEdit Edit the details describing artifacts
ArtifactView View the artifacts created manually and during deployment
BuildInformationAdminister Replace or delete build information
BuildInformationPush Create/update build information
BuiltInFeedAdminister Replace or delete packages in the built-in package repository
BuiltInFeedDownload Retrieve the contents of packages in the built-in package repository
BuiltInFeedPush Push new packages to the built-in package repository
CertificateCreate Create certificates
CertificateDelete Delete certificates
CertificateEdit Edit certificates
CertificateExportPrivateKey Export certificate private-keys
CertificateView View certificates
DefectReport Block a release from progressing to the next lifecycle phase
DefectResolve Unblock a release so it can progress to the next phase
DeploymentCreate Deploy releases to target environments
DeploymentDelete Delete deployments
DeploymentView View deployments
EnvironmentCreate Create environments
EnvironmentDelete Delete environments
EnvironmentEdit Edit environments
EnvironmentView View environments
EventView View Events, including access to the Audit screen
FeedEdit Edit feeds
FeedView View package feeds and the packages in them
GitCredentialEdit Edit Git credentials
GitCredentialView View Git credentials
InterruptionSubmit Take responsibility for and submit interruptions generated during deployments
InterruptionView View interruptions generated during deployments
InterruptionViewSubmitResponsible Take responsibility for and submit interruptions generated during deployments when the user is in a designated responsible team
LibraryVariableSetCreate Create library variable sets
LibraryVariableSetDelete Delete library variable sets
LibraryVariableSetEdit Edit library variable sets
LibraryVariableSetView View library variable sets
LifecycleCreate Create lifecycles
LifecycleDelete Delete lifecycles
LifecycleEdit Edit lifecycles
LifecycleView View lifecycles
MachineCreate Create machines
MachineDelete Delete machines
MachineEdit Edit machines
MachinePolicyCreate Create health check policies
MachinePolicyDelete Delete health check policies
MachinePolicyEdit Edit health check policies
MachinePolicyView View health check policies
MachineView View machines
ProcessEdit Edit the deployment process and channels associated with a project
ProcessView View the deployment process and channels associated with a project
ProjectCreate Create projects
ProjectDelete Delete projects
ProjectEdit Edit project details
ProjectGroupCreate Create project groups
ProjectGroupDelete Delete project groups
ProjectGroupEdit Edit project groups
ProjectGroupView View project groups
ProjectView View the details of projects
ProxyCreate Create proxies
ProxyDelete Delete proxies
ProxyEdit Edit proxies
ProxyView View proxies
ReleaseCreate Create a release for a project
ReleaseDelete Delete a release of a project
ReleaseEdit Edit a release of a project
ReleaseView View a release of a project
RunbookEdit Edit runbooks
RunbookRunCreate Create runbook runs
RunbookRunDelete Delete runbook runs
RunbookRunView View runbook runs
RunbookSnapshotCreate Create runbook snapshots
RunbookView View runbooks
SubscriptionCreate Create subscriptions
SubscriptionDelete Delete subscriptions
SubscriptionEdit Edit subscriptions
SubscriptionView View subscriptions
TagSetCreate Create tag sets
TagSetDelete Delete tag sets
TagSetEdit Edit tag sets
TaskCancel Cancel server tasks
TaskCreate Explicitly create (run) server tasks
TaskEdit Edit server tasks
TaskView View summary-level information associated with a task
TeamCreate Create teams
TeamDelete Delete teams
TeamEdit Edit teams
TeamView View teams
TenantCreate Create tenants
TenantDelete Delete tenants
TenantEdit Edit tenants
TenantView View tenants
TriggerCreate Create triggers
TriggerDelete Delete triggers
TriggerEdit Edit triggers
TriggerView View triggers
VariableEdit Edit variables belonging to a project
VariableEditUnscoped Edit non-environment scoped variables belonging to a project or library variable set
VariableView View variables belonging to a project or library variable set
VariableViewUnscoped View non-environment scoped variables belonging to a project or library variable set
WorkerEdit Edit workers and worker pools
WorkerView View the workers in worker pools

System Administrator

System Permission Description
AdministerSystem Perform system-level functions like configuring HTTP web hosting, the public URL, server nodes, maintenance mode, and server diagnostics
ConfigureServer Configure server settings like Authentication, SMTP, and HTTP Security Headers
EventRetentionDelete Delete archived event files
EventRetentionView View/list archived event files
EventView View Events, including access to the Audit screen
PlatformHubEdit Edit Platform Hub configuration and resources
PlatformHubView View Platform Hub configuration and resources
SpaceCreate Create spaces
SpaceDelete Delete spaces
SpaceEdit Edit spaces
SpaceView View spaces
SshKnownHostsAdminister Add, edit, and remove SSH known hosts
SshKnownHostsView View SSH known hosts
TaskCancel Cancel server tasks
TaskCreate Explicitly create (run) server tasks
TaskEdit Edit server tasks
TaskView View summary-level information associated with a task
TeamCreate Create teams
TeamDelete Delete teams
TeamEdit Edit teams
TeamView View teams
UserEdit Edit users
UserInvite Invite users to register accounts
UserRoleEdit Edit user role definitions
UserRoleView View other user’s roles
UserView View users

System Manager

System Permission Description
ConfigureServer Configure server settings like Authentication, SMTP, and HTTP Security Headers
EventRetentionDelete Delete archived event files
EventRetentionView View/list archived event files
EventView View Events, including access to the Audit screen
PlatformHubEdit Edit Platform Hub configuration and resources
PlatformHubView View Platform Hub configuration and resources
SpaceCreate Create spaces
SpaceDelete Delete spaces
SpaceEdit Edit spaces
SpaceView View spaces
SshKnownHostsAdminister Add, edit, and remove SSH known hosts
SshKnownHostsView View SSH known hosts
TaskCancel Cancel server tasks
TaskCreate Explicitly create (run) server tasks
TaskEdit Edit server tasks
TaskView View summary-level information associated with a task
TeamCreate Create teams
TeamDelete Delete teams
TeamEdit Edit teams
TeamView View teams
UserEdit Edit users
UserInvite Invite users to register accounts
UserRoleEdit Edit user role definitions
UserRoleView View other user’s roles
UserView View users

Tenant Manager

Space Permission Description
TenantCreate Create tenants
TenantDelete Delete tenants
TenantEdit Edit tenants
TenantView View tenants