Roles and permissions

services permissions enable administrators to select specific permissions used to create custom roles, allowing users to have designated actions and permissions for specific services based on the authorization model system settings support \ permission name \ \ description \ \ roles related to \ feedback brokers repos view allow to view service broker repos administrator feedback brokers settings create allow to create service broker settings administrator feedback brokers settings delete allow to delete existing service broker settings administrator feedback brokers settings update allow to update existing service broker settings administrator feedback brokers settings view allow to view service broker settings administrator feedback issues create allow to create issue administrator feedback issues delete allow to delete existing issue administrator feedback issues update allow to update existing issue administrator feedback issues view allow to view issues administrator user invitations \ permission name \ \ description \ \ roles related to \ accounts user reinvite allow to reinvite the account initial user administrator editor iam invitations create allow to create invitations administrator iam invitations delete allow to delete invitations administrator editor iam invitations resend allow to resend pending invitations administrator editor iam invitations update allow to update invitations administrator editor iam invitations view allow to view invitations administrator editor iam organization bulkdelete allow to delete multiple organizations administrator editor iam organization create allow to create new organization administrator operator viewer iam organization invite allow to invite new user to an organization administrator editor iam organization view allow to view an organization administrator editor resources and users \ permission name \ \ description \ \ roles related to \ iam resourceattributes view allow to view resources administrator editor operator viewer iam resourceattributesvalues view allow to view resources attribute values administrator editor operator viewer iam resourcegroups view allow to view resource groups administrator editor operator viewer iam usergroups view allow to view user groups administrator editor operator viewer iam usermapping update allow to update user mapping assertions administrator editor iam users lastoperation view allow to view last operation performed for an user administrator editor iam users bulkdelete allow to delete multiple users administrator editor iam users create allow to create the users administrator iam users delete allow to delete the users administrator editor iam users update allow to update the users administrator editor iam users view allow to view the users administrator editor account, roles and permissions \ permission name \ \ description \ \ roles related to \ fileserver files view allow to view files administrator editor operator viewer iam accounts create allow to create a new account administration iam accounts delete allow to delete accounts administrator editor iam accounts update allow to update an account administrator editor iam accounts view allow to view accounts administrator editor operator viewer iam brokers delete allow to delete broker administrator editor iam brokers register allow to register new broker administrator editor iam brokers test allow to test brokers administrator editor operator viewer iam brokers view allow to view brokers administrator editor operator viewer iam businessservices view allow to view business services administrator editor operator viewer iam catalogs view allow to view catalogs administrator editor operator viewer iam customrole create allow to create a custom role administrator iam customrole delete allow to delete a custom role administrator editor iam customrole update allow to update a custom role administrator editor iam customrole view allow to view custom roles administrator editor operator viewer service ids \ permission name \ \ description \ \ roles related to \ iam serviceids create allow to create serviceids administrator iam serviceids delete allow to delete serviceids administrator editor iam serviceids update allow to update serviceids administrator editor iam serviceids view allow to view serviceids administrator editor operator viewer smtp \ permission name \ \ description \ \ roles related to \ iam smtp create allow to create smtp config administrator iam smtp delete allow to delete smtp config administrator editor iam smtp view allow to view smtp config administrator editor operator viewer iam spmetadata view allow to view saml sp metadata administrator editor operator viewer idp \ permission name \ \ description \ \ roles related to \ iam idp metadata view allow to view identity provider metadata administrator editor operator viewer iam idp create allow to create identity provider administrator iam idp delete allow to delete identity provider administrator editor iam idp replace allow to replace fields of an identity provider administrator editor iam idp update allow to update an identity provider administrator editor iam idp view allow to view an identity provider administrator editor operator viewer api keys, key values, and tokens \ permission name \ \ description \ \ roles related to \ iam apikeys create allow to create api keys administrator editor operator viewer iam apikeys delete allow to delete existing api keys administrator editor operator iam apikeys manage allow to manage api keys administrator editor iam apikeys replace allow to replace existing api keys administrator editor operator viewer iam apikeys update allow to patch existing api keys administrator editor operator viewer iam apikeys view allow to view api keys administrator editor operator viewer iam tokens create allow to create a token administrator iam tokens delete allow to delete a token administrator editor iam tokens replace allow to replace a token administrator editor iam tokens update allow to update a token administrator editor iam tokens view allow to view tokens administrator editor operator viewer iam keyvalues create allow to add key value administrator iam keyvalues delete allow to delete key value administrator editor iam keyvalues update allow to update key value administrator editor iam keyvalues view allow to view key value administrator editor operator viewer access tags \ permission name \ \ description \ \ roles related to \ iam accesstags create allow to add accesstags administrator iam accesstags delete allow to delete accesstags administrator editor iam accesstags update allow to update accesstags administrator editor operator iam accesstags view allow to view accesstags administrator editor operator viewer access groups and access policies \ permission name \ \ description \ \ roles related to \ iam accessgroups members add allow to add members to access group administrator editor iam accessgroups members delete allow to delete accessgroup member administrator editor iam accessgroups members view allow to view access group members administrator editor iam accessgroups rules add allow to add rules to access group administrator editor iam accessgroups rules delete allow to delete access group rules administrator editor iam accessgroups rules view allow to view access group rules administrator editor operator viewer iam accessgroups create allow to create accessgroup administrator iam accessgroups delete allow to delete accessgroup administrator editor iam accessgroups update allow to update access group administrator editor operator iam accessgroups view allow to view access groups administrator editor operator viewer iam authzpolicy create allow to create new authorization policies administrator iam authzpolicy delete allow to delete authorization policies administrator editor iam authzpolicy update allow to update authorization policies administrator editor iam authzpolicy view allow to view authorization policies administrator editor operator viewer iam policies view allow to view policies administrator editor operator viewer connections, notifications, and metering \ permission name \ \ description \ \ roles related to \ iam connections create allow to create connections administrator iam connections delete allow to delete connections administrator editor iam connections test allow to test connections administrator editor operator viewer iam connections update allow to update connections administrator editor iam connections view allow to view connections administrator editor operator viewer metering brokersusage view allow to view service broker usage administrator editor operator viewer metering meter view allow to view metering details administrator editor operator viewer metering resetcosa create allow to reset cosa state administrator editor operator viewer metering tenantmeter view allow to view tenant specific metering details administrator editor operator viewer metering tenantsusage view allow to view tenant specific metering usage administrator editor operator viewer metering usage download allow to download metering data administrator editor operator viewer metering usage view allow to view metering usage administrator editor operator viewer notification emailsettings create allow to create notification emailsettings administrator editor operator viewer notification emailsettings delete allow to delete notification emailsettings administrator editor operator viewer notification emailsettings update allow to update notification emailsettings administrator editor operator viewer notification emailsettings view allow to view notification emailsettings administrator editor operator viewer notification inapp create allow to create inapp notification administrator editor operator viewer notification inapp delete allow to delete inapp notification administrator editor operator viewer notification inapp update allow to update inapp notification administrator editor operator viewer notification inapp view allow to view inapp notification administrator editor operator viewer notification template create allow to create notification template administrator editor operator viewer notification template delete allow to delete notification template administrator editor operator viewer notification template put allow to put notification template administrator editor operator viewer notification template update allow to update notification template administrator editor operator viewer notification template view allow to view notification template administrator editor operator viewer security connections create allow to create connections administrator operator security connections delete allow to delete connections administrator editor operator security connections link allow to link shared connections administrator editor operator security connections replace allow to replace connections administrator editor operator security connections test allow to test connections administrator editor operator security connections update allow to update connections administrator editor operator security connections view allow to view connections administrator editor operator viewer security connectionstatus view allow to get test connection status administrator editor operator viewer security connectiontypes create allow to add/update connectiontypes for a client tenant administrator security connectiontypes delete allow to delete connection types for a client tenant administrator editor security connectiontypes view allow to view connectiontypes for a client tenant administrator editor tenant settings \ permission name \ \ description \ \ roles related to \ iam tenant activitylogs view allow to view activity logs for a tenant administrator editor operator viewer iam tenant entitlements update allow to update tenant entitlements administrator editor iam tenant entitlements view allow to view tenant entitlements administrator editor iam tenant membership add allow to add the tenant level roles of the users administrator editor iam tenant membership remove allow to remove the tenant level roles of the users administrator editor iam tenant opssettings view get ops settings administrator editor iam tenant owner update allow to update tenant owner administrator editor iam tenant settings update allow to update tenant settings administrator editor iam tenant settings view allow to view tenant settings administrator editor operator viewer iam tenant bindinginfo view allow to view binding info administrator editor iam tenant create allow to create new tenant administrator iam tenant delete allow to delete a tenant administrator editor iam tenant modify allow to modify a tenant administrator editor iam tenant update allow to update a tenant administrator editor iam tenant view allow to view tenants administrator editor operator viewer iam tenantidp create allow to create tenant manager level identity provider administrator iam tenantidp delete allow to delete tenant manager level identity provider administrator editor iam tenantidp replace allow to replace fields of tenant manager level identity provider administrator editor iam tenantidp update allow to update fields of tenant manager level identity provider administrator editor iam tenantidp view allow to view tenant manager level identity provider administrator editor operator viewer iam tenants globalfeatureflags update allow to update tenant featureflags administrator editor iam tenants opssettings update allow to update tenant opssettings administrator editor iam tenants opssettings view allow to view tenant opssettings administrator editor operator viewer iam tm invitations create allow to create tenant manager level invitations administrator iam tm invitations delete allow to delete tenant manager level invitations administrator editor iam tm invitations update allow to update tenant manager invitations administrator editor iam tm invitations view allow to view tenant manager level invitations administrator editor iam dcphost view allow to retrive the dcp base host based on region administrator editor operator viewer iam delegatedtoken create allow to create delegated token administrator iam dns view allow to view dns administrator editor operator viewer iam domains view allow to view domains administrator editor operator viewer iam globalidp view allow to view global identity providers administrator editor operator viewer iam identity unlink allow to unlink the user identity administrator editor iam oidcapp create allow to create oidc application administrator iam oidcapp delete allow to delete oidc application administrator editor iam oidcapp replace allow to replace oidc application administrator editor iam oidcapp update allow to update oidc application administrator editor iam oidcapp view allow to view oidc application administrator editor operator viewer audit \ permission name \ \ description \ \ roles related to \ audit records download allow to download audit records administrator editor audit records view allow to view audit records administrator editor iam audit delete allow to delete audit administrator editor iam audit replace allow to replace audit administrator editor iam audit view allow to view audit administrator editor operator viewer security \ permission name \ \ description \ \ roles related to \ security connections create allow to create connections administrator security connections delete allow to delete connections administrator security connections update allow to update connections administrator security connections view administrator viewer security connections test allow to test connections administrator viewer security vaultconfig create allow to create vault config \[only api] administrator security vaultconfig delete allow to delete vault config \[only api] administrator security vaultconfig view allow to view vault config \[only api] administrator security connectionstypes view allow to view connections metadata viewer discovery management \ permission name \ \ description \ \ roles related to \ common discovery account view allow to view inventory accounts administrator editor operator viewer common discovery actions admin allow to onboard actions administrator common discovery actions execute allow to execute actions administrator operator common discovery actions view allow to view inventory actions administrator editor operator viewer common discovery category view allow to view inventory records' category administrator editor operator viewer common discovery location view allow to view inventory records' location administrator editor operator viewer common discovery service view allow to view inventory records administrator editor operator viewer common discovery tags edit allow to edit/add/delete inventory resources tags administrator editor common discovery tags view allow to view import tags jobs for inventory resources administrator editor actions \ permission name \ \ description \ \ roles related to \ actions action category view allow to perform view operation on action category administrator editor operator viewer action viewer action registry admin actions action definition view allow to perform view operation on action definition administrator editor operator viewer action viewer action registry admin actions action policy view allow to perform view operation on action policy administrator editor operator viewer action viewer action registry admin actions action provider view allow to perform view operation on action provider administrator editor operator viewer action viewer action registry admin actions action request view allow to perform view operation on action request administrator editor operator viewer action viewer action registry admin actions action stats view allow to perform view operation on action stats administrator editor operator viewer action viewer action registry admin actions action support view allow to perform view operation on action support administrator editor operator viewer action viewer action registry admin actions action types view allow to perform view operation on action type administrator editor operator viewer action viewer action registry admin actions action category crud allow to perform crud operation on action category administrator editor action registry admin actions action definition crud allow to perform crud operation on action definition administrator editor action registry admin actions action engine api manager crud allow to perform crud operation on action enginer api manager administrator editor action registry admin actions action engine practitioner crud allow to perform crud operation on action engine practitioner administrator editor action registry admin actions action onboarding crud allow to perform crud operation on action onboarding administrator editor action registry admin actions action policy crud allow to perform crud operation on action policy administrator editor action registry admin actions action provider crud allow to perform crud operation on action provider administrator editor action registry admin actions action request crud allow to perform crud operation on action request administrator editor action registry admin actions action stats crud allow to perform crud operation on action stats administrator editor action registry admin actions action support crud allow to perform crud operation on action support administrator editor action registry admin actions action types crud allow to perform crud operation on action types administrator editor action registry admin topology \ permission name \ \ description \ \ roles related to \ topology impactanalysis data view allow to view impactanalysis administrator editor operator viewer topology topology data view allow to view topology data administrator editor operator viewer topology topology metadata view allow to view topology metadata administrator editor operator viewer topology topology tags view allow to view topology tags administrator editor operator viewer container cluster management \ permission name \ \ description \ \ roles related to \ ccm cluster alerts view allow to view alerts of a cluster administrator editor operator viewer ccm cluster data view allow to view cluster data administrator editor operator viewer ccm cluster view allow to view cluster administrator editor operator viewer ccm clusters alerts view allow to view alerts of all clusters administrator editor operator viewer ccm clusters view allow to view clusters administrator editor operator viewer ccm custom views create allow to create custom views administrator editor operator viewer ccm custom views delete allow to delete custom views administrator editor operator viewer ccm custom views update allow to update custom views administrator editor operator viewer ccm custom views view allow to view custom views administrator editor operator viewer ccm discovery clusters view allow to view discovery clusters administrator editor operator viewer ccm geo locations delete allow to delete geographical locations for clusters administrator editor operator viewer ccm geo locations edit allow to edit geographical locations for clusters administrator editor operator viewer ccm geo locations view allow to view geographical locations for clusters administrator editor operator viewer ccm geolocation aggregates view allow to view cluster geolocation aggregates administrator editor operator viewer ccm insights recommendations view allow to view insights recommendations administrator editor operator viewer ccm kubernetes clusterrole create allow to create kubernetes resource clusterrole administrator editor operator ccm kubernetes clusterrole delete allow to delete kubernetes resource clusterrole administrator ccm kubernetes clusterrolebinding create allow to create kubernetes resource clusterrolebinding administrator editor operator ccm kubernetes clusterrolebinding delete allow to delete kubernetes resource clusterrolebinding administrator ccm kubernetes configmap create allow to create kubernetes resource configmap administrator editor operator ccm kubernetes configmap delete allow to delete kubernetes resource configmap administrator ccm kubernetes cronjob create allow to create kubernetes resource cronjob administrator editor operator ccm kubernetes cronjob delete allow to delete kubernetes resource cronjob administrator ccm kubernetes customresourcedefinition create allow to create kubernetes resource customresourcedefinition administrator editor operator ccm kubernetes customresourcedefinition delete allow to delete kubernetes resource customresourcedefinition administrator ccm kubernetes daemonset create allow to create kubernetes resource daemonset administrator editor operator ccm kubernetes daemonset delete allow to delete kubernetes resource daemonset administrator ccm kubernetes deployment create allow to create kubernetes resource deployment administrator editor operator ccm kubernetes deployment delete allow to delete kubernetes resource deployment administrator ccm kubernetes endpoints create allow to create kubernetes resource endpoints administrator editor operator ccm kubernetes endpoints delete allow to delete kubernetes resource endpoints administrator ccm kubernetes endpointslice create allow to create kubernetes resource endpointslice administrator editor operator ccm kubernetes endpointslice delete allow to delete kubernetes resource endpointslice administrator ccm kubernetes horizontalpodautoscaler create allow to create kubernetes resource horizontalpodautoscaler administrator editor operator ccm kubernetes horizontalpodautoscaler delete allow to delete kubernetes resource horizontalpodautoscaler administrator ccm kubernetes ingress create allow to create kubernetes resource ingress administrator editor operator ccm kubernetes ingress delete allow to delete kubernetes resource ingress administrator ccm kubernetes job create allow to create kubernetes resource job administrator editor operator ccm kubernetes job delete allow to delete kubernetes resource job administrator ccm kubernetes limitrange create allow to create kubernetes resource limitrange administrator editor operator ccm kubernetes limitrange delete allow to delete kubernetes resource limitrange administrator ccm kubernetes namespace create allow to create kubernetes resource namespace administrator editor operator ccm kubernetes namespace delete allow to delete kubernetes resource namespace administrator ccm kubernetes networkpolicy create allow to create kubernetes resource networkpolicy administrator editor operator ccm kubernetes networkpolicy delete allow to delete kubernetes resource networkpolicy administrator ccm kubernetes persistentvolume create allow to create kubernetes resource persistentvolume administrator editor operator ccm kubernetes persistentvolume delete allow to delete kubernetes resource persistentvolume administrator ccm kubernetes persistentvolumeclaim create allow to create kubernetes resource persistentvolumeclaim administrator editor operator ccm kubernetes persistentvolumeclaim delete allow to delete kubernetes resource persistentvolumeclaim administrator ccm kubernetes pod create allow to create kubernetes resource pod administrator editor operator ccm kubernetes pod delete allow to delete kubernetes resource pod administrator ccm kubernetes poddisruptionbudget create allow to create kubernetes resource poddisruptionbudget administrator editor operator ccm kubernetes poddisruptionbudget delete allow to delete kubernetes resource poddisruptionbudget administrator ccm kubernetes priorityclass create allow to create kubernetes resource priorityclass administrator editor operator ccm kubernetes priorityclass delete allow to delete kubernetes resource priorityclass administrator ccm kubernetes replicaset create allow to create kubernetes resource replicaset administrator editor operator ccm kubernetes replicaset delete allow to delete kubernetes resource replicaset administrator ccm kubernetes resource types view allow to view kubernetes resource types list administrator editor operator viewer ccm kubernetes resourcequota create allow to create kubernetes resource resourcequota administrator editor operator ccm kubernetes resourcequota delete allow to delete kubernetes resource resourcequota administrator ccm kubernetes role create allow to create kubernetes resource role administrator editor operator ccm kubernetes role delete allow to delete kubernetes resource role administrator ccm kubernetes rolebinding create allow to create kubernetes resource rolebinding administrator editor operator ccm kubernetes rolebinding delete allow to delete kubernetes resource rolebinding administrator ccm kubernetes secret create allow to create kubernetes resource secret administrator editor operator ccm kubernetes secret delete allow to delete kubernetes resource secret administrator ccm kubernetes service create allow to create kubernetes resource service administrator editor operator ccm kubernetes service delete allow to delete kubernetes resource service administrator ccm kubernetes serviceaccount create allow to create kubernetes resource serviceaccount administrator editor operator ccm kubernetes serviceaccount delete allow to delete kubernetes resource serviceaccount administrator ccm kubernetes statefulset create allow to create kubernetes resource statefulset administrator editor operator ccm kubernetes statefulset delete allow to delete kubernetes resource statefulset administrator ccm kubernetes storageclass create allow to create kubernetes resource storageclass administrator editor operator ccm kubernetes storageclass delete allow to delete kubernetes resource storageclass administrator ccm pod logs download allow to download pod logs administrator editor operator viewer ccm prometheus alerts view allow to view cluster alerts administrator editor operator viewer ccm prometheus node metrics view allow to view cluster node metrics administrator editor operator viewer ccm prometheus pod metrics view allow to view cluster pod metrics administrator editor operator viewer ccm prometheus stats view allow to view cluster stats administrator editor operator viewer ccm provider aggregates view allow to view cluster provider aggregates administrator editor operator viewer feature flags \ permission name \ \ description \ \ roles related \ \ to \ platform featureflags create allow to create feature flags platform administrator platform featureflags delete allow to delete feature flags platform administrator platform featureflags disable allow to disable feature flags platform administrator platform featureflags enable allow to enable feature flags platform administrator platform featureflags view allow to enable feature flags platform administratorplatform viewer