Resource Operation Reference
System
System
| Operation | Description | Default |
|---|---|---|
Manage system permissions |
Deny |
|
Access to action log |
Deny |
|
Read system settings |
Deny |
|
Manage system settings |
Deny |
|
Create auth clients |
Deny |
|
List, search or filter auth clients |
Deny |
|
Create roles |
Deny |
|
List, search or filter roles |
Deny |
|
Create users |
Deny |
|
List, search or filter users |
Deny |
|
Create DAL connections |
Deny |
|
List, search or filter DAL connections |
Deny |
|
Can manage DAL sensitivity levels |
Deny |
|
Create applications |
Deny |
|
List, search or filter auth clients |
Deny |
|
Manage private flags for applications |
Deny |
|
Manage global flags for applications |
Deny |
|
Create template |
Deny |
|
List, search or filter templates |
Deny |
|
Create report |
Deny |
|
List, search or filter reports |
Deny |
|
Assign reminders |
Deny |
|
Create messagebus queues |
Deny |
|
List, search or filter messagebus queues |
Deny |
|
Create API gateway route |
Deny |
|
List search or filter API gateway routes |
Deny |
|
List, search, create, or update resource translations |
Deny |
|
List, search, apply, or dismiss DAL alterations |
Deny |
|
Create data privacy requests |
Deny |
|
List, search or filter data privacy requests |
Deny |
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.attachment.gen.adoc[]
application
| Operation | Description | Default |
|---|---|---|
Read application |
Deny |
|
Update application |
Deny |
|
Delete application |
Deny |
apigw-route
| Operation | Description | Default |
|---|---|---|
Read API Gateway route |
Deny |
|
Update API Gateway route |
Deny |
|
Delete API Gateway route |
Deny |
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.apigw-filter.gen.adoc[]
auth-client
| Operation | Description | Default |
|---|---|---|
Read authorization client |
Deny |
|
Update authorization client |
Deny |
|
Delete authorization client |
Deny |
|
Authorize authorization client |
Deny |
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.auth-confirmed-client.gen.adoc[]
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.auth-session.gen.adoc[]
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.auth-oa2token.gen.adoc[]
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.credential.gen.adoc[]
data-privacy-request
| Operation | Description | Default |
|---|---|---|
Read data privacy request |
Deny |
|
Approve/Reject data privacy request |
Deny |
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.data-privacy-request-comment.gen.adoc[]
queue
| Operation | Description | Default |
|---|---|---|
Read queue |
Deny |
|
Update queue |
Deny |
|
Delete queue |
Deny |
|
Read from queue |
Deny |
|
Write to queue |
Deny |
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.queue-message.gen.adoc[]
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.reminder.gen.adoc[]
report
| Operation | Description | Default |
|---|---|---|
Read report |
Deny |
|
Update report |
Deny |
|
Delete report |
Deny |
|
Run report |
Deny |
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.resource-translation.gen.adoc[]
role
| Operation | Description | Default |
|---|---|---|
Read role |
Deny |
|
Update role |
Deny |
|
Delete role |
Deny |
|
Manage members |
Deny |
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.role-member.gen.adoc[]
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.settings.gen.adoc[]
template
| Operation | Description | Default |
|---|---|---|
Read template |
Deny |
|
Update template |
Deny |
|
Delete template |
Deny |
|
Render template |
Deny |
user
| Operation | Description | Default |
|---|---|---|
Read user |
Deny |
|
Update user |
Deny |
|
Delete user |
Deny |
|
Suspend user |
Deny |
|
Unsuspend user |
Deny |
|
Unmask email |
Deny |
|
Unmask name |
Deny |
|
Impersonate user |
Deny |
|
Manage user’s credentials |
Deny |
dal-connection
| Operation | Description | Default |
|---|---|---|
Read connection |
Deny |
|
Update connection |
Deny |
|
Delete connection |
Deny |
|
Manage DAL configuration |
Deny |
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.dal-sensitivity-level.gen.adoc[]
Unresolved include directive in modules/generated/partials/access-control/system/index.gen.adoc - include::./resource.dal-schema-alteration.gen.adoc[]
Compose
Compose
| Operation | Description | Default |
|---|---|---|
Manage compose permissions |
Deny |
|
Read settings |
Deny |
|
Manage settings |
Deny |
|
Create namespace |
Deny |
|
List, search or filter namespaces |
Deny |
|
List, search, create, or update resource translations |
Deny |
Unresolved include directive in modules/generated/partials/access-control/compose/index.gen.adoc - include::./resource.attachment.gen.adoc[]
module
| Operation | Description | Default |
|---|---|---|
read |
Deny |
|
update |
Deny |
|
delete |
Deny |
|
Create record |
Deny |
|
Create record with custom owner |
Deny |
|
List, search or filter records |
Deny |
module-field
| Operation | Description | Default |
|---|---|---|
Read field value on records |
Deny |
|
Update field value on records |
Deny |
namespace
| Operation | Description | Default |
|---|---|---|
read |
Deny |
|
update |
Deny |
|
delete |
Deny |
|
Access to namespace admin panel |
Deny |
|
Create module on namespace |
Deny |
|
List, search or filter module on namespace |
Deny |
|
Create chart on namespace |
Deny |
|
List, search or filter chart on namespace |
Deny |
|
Create page on namespace |
Deny |
|
List, search or filter pages on namespace |
Deny |
page
| Operation | Description | Default |
|---|---|---|
read |
Deny |
|
update |
Deny |
|
delete |
Deny |
|
Create page layout on namespace |
Deny |
|
List, search or filter page layouts on namespace |
Deny |
Federation
Federation
| Operation | Description | Default |
|---|---|---|
Manage federation permissions |
Deny |
|
Pair federation nodes |
Deny |
|
Read settings |
Deny |
|
Manage settings |
Deny |
|
Create new federation node |
Deny |
|
List, search or filter federation nodes |
Deny |
node
| Operation | Description | Default |
|---|---|---|
Manage federation node |
Deny |
|
Create shared module |
Deny |
Unresolved include directive in modules/generated/partials/access-control/federation/index.gen.adoc - include::./resource.node-sync.gen.adoc[]
Automation
Automation
| Operation | Description | Default |
|---|---|---|
Manage automation permissions |
Deny |
|
Create workflows |
Deny |
|
List, search or filter triggers |
Deny |
|
List, search or filter sessions |
Deny |
|
List, search or filter workflows |
Deny |
|
List, search, create, or update resource translations |
Deny |
workflow
| Operation | Description | Default |
|---|---|---|
Read workflow |
Deny |
|
Update workflow |
Deny |
|
Delete workflow |
Deny |
|
Undelete workflow |
Deny |
|
Execute workflow |
Deny |
|
Manage workflow triggers |
Deny |
|
Manage workflow sessions |
Deny |
Unresolved include directive in modules/generated/partials/access-control/automation/index.gen.adoc - include::./resource.session.gen.adoc[]
Unresolved include directive in modules/generated/partials/access-control/automation/index.gen.adoc - include::./resource.trigger.gen.adoc[]