Permissions

An overview of the permissions available when defining roles.

Permission	Description
Alerts_Edit	Dismiss alerts.
Alerts_Read	View alerts, alert dismissals and aggregated alerts.
EnvironmentVariables_Edit	Create, update, and delete environment variables.
EnvironmentVariables_Read	View environment variables values.
ExternalConstantData_Edit	Fetch and delete a ruleset's external constant data.
Metrics_Edit	Clear ruleset metrics.
Metrics_Read	View ruleset metrics.
MiniApp_Edit	Create, update, import, rollback and delete mini apps + mini app revisions.
MiniApp_Read	View and export mini apps + mini app revisions.
RuleSet_Edit	Create, update, import, copy, group, make active, rollback and delete rulesets + ruleset revisions + ruleset tests + sandbox data.
RuleSet_Execute	Execute rulesets and ruleset functions. Start and signal ruleset workflows.
RuleSet_Lock	Lock and unlock rulesets.
RuleSet_Read	View, search and export rulesets + ruleset revisions + ruleset tests + ruleset test results + sandbox data + external constant data + environment variables of a tenant.
Tenant_Analytics	View ruleset execution statistics.
Tenant_Edit	Edit organization settings, upload and delete blobs. Create, edit, re-generate, delete API keys.
Tenant_Read	View any organization settings and API keys.
User_Edit	Invite new users, delete users, change a user's roles, and reset a user's authenticator key.
User_Read	View all users within the organization.
WorkflowInstance_Edit	Halt and resume workflow instances. Upload and delete workflow instance documents.
WorkflowInstance_Read	View workflow instances. View workflow instance documents. Get workflow step counts.
WorkflowInstance_Assign	Assign and unassign workflow instances to users.
WorkflowTask_Edit	Assign, unassign tasks to yourself, complete tasks, update an assigned task checklist items.
WorkflowTask_Read	View workflow tasks relevant to you.
WorkflowTask_Assign	Assign and unassign workflow tasks to other users.
Ockto_Start	Start Ockto data fetch processes.
Ockto_Read	View Ockto data fetch statuses and results.
Role_Edit	Create, update, and delete roles.
Role_Read	View roles and permissions.
Workspace_Read	View basic tenant information. View workspaces. View persisted entities. Anything from PDF controller.