Resource type reference
This topic lists resource types relevant to RBAC in Harness. Each resource type has an identifier used in APIs and YAML, and a permission key used to construct permission strings such as core_pipeline_view.
Resource types
Resource types are grouped by the Harness module or platform area that owns them. Platform resource types are available to every module, and module resource types require a license for that module.
Harness Platform
These resource types apply across Harness and are not specific to a single module.
| Identifier | Permission key |
|---|---|
ACCOUNT | account |
ORGANIZATION | organization |
PROJECT | project |
CONNECTOR | connector |
DELEGATE | delegate |
DELEGATECONFIGURATION | delegateconfiguration |
SECRET | secret |
AUDIT | audit |
DASHBOARDS | dashboards |
TEMPLATE | template |
TICKET | ticket |
FILE | file |
VARIABLE | variable |
SMTP | smtp |
SETTING | setting |
STREAMING_DESTINATION | streamingDestination |
MODULE | module |
GITX_WEBHOOKS | gitxWebhooks |
CERTIFICATE | certificate |
PROVIDER | provider |
RELEASES | releases |
INPUT_SET | inputset |
BANNER | banner |
OIDC_ID_TOKEN | oidcIdToken |
DATA_SINK | dataSink |
AI_RULES | rules |
BRANDING | branding |
LLM_GATEWAY | llmgateway |
USER | user |
SERVICEACCOUNT | serviceaccount |
USERGROUP | usergroup |
ROLE | role |
RESOURCEGROUP | resourcegroup |
LICENSE | license |
AUTHSETTING | authsetting |
ACCESS_POLICIES | accessPolicies |
NOTIFICATION | notification |
NOTIFICATION_CHANNEL | notificationchannel |
NOTIFICATION_RULE | notificationrule |
DEFAULT_NOTIFICATION_TEMPLATE_SET | defaultNotificationTemplateSet |
GOVERNANCEPOLICY | governancePolicy |
GOVERNANCEPOLICYSETS | governancePolicySets |
NETWORK_MAP | networkmap |
Continuous Delivery and GitOps
These resource types apply to pipelines, deployments, and GitOps.
| Identifier | Permission key |
|---|---|
PIPELINE | pipeline |
SERVICE | service |
ENVIRONMENT | environment |
ENVIRONMENT_GROUP | environmentgroup |
GITOPS_AGENT | agent |
GITOPS_APP | application |
GITOPS_REPOSITORY | repository |
GITOPS_CLUSTER | cluster |
GITOPS_GPGKEY | gpgkey |
GITOPS_CERT | cert |
GITOPS_APPLICATIONSET | applicationset |
DEPLOYMENTFREEZE | deploymentfreeze |
Code Repository
These resource types apply to Harness Code Repository.
| Identifier | Permission key |
|---|---|
CODE_REPOSITORY | repo |
Artifact Registry
These resource types apply to Harness Artifact Registry.
| Identifier | Permission key |
|---|---|
ARTIFACT_REGISTRY | artregistry |
ARTIFACT_FIREWALL_EXCEPTIONS | firewallexceptions |
HAR_REGISTRY | harregistry |
Security Testing Orchestration
These resource types apply to Harness STO.
| Identifier | Permission key |
|---|---|
STO_TESTTARGET | testtarget |
STO_EXEMPTION | exemption |
STO_ISSUE | issue |
STO_SCAN | scan |
STO_OVERRIDE | override |
Supply Chain Security
These resource types apply to Harness SCS.
| Identifier | Permission key |
|---|---|
SSCA_REMEDIATION_TRACKER | remediationtracker |
SSCA_ENFORCEMENT_EXEMPTION | enforcementexemption |
Feature Flags
These resource types apply to the Harness Feature Flags module.
| Identifier | Permission key |
|---|---|
FEATUREFLAG | featureflag |
FF_PROXYAPIKEY | proxyapikey |
TARGET | target |
TARGETGROUP | targetgroup |
Feature Management and Experimentation
These resource types apply to Harness FME.
| Identifier | Permission key |
|---|---|
FME_ENVIRONMENT | fmeenvironment |
FME_TRAFFIC_TYPE | fmetraffictype |
FME_FEATURE_FLAG | fmefeatureflag |
FME_SEGMENT | fmesegment |
FME_LARGE_SEGMENT | fmelargesegment |
FME_METRIC | fmemetric |
FME_EXPERIMENT | fmeexperiment |
FME_CONFIG | fmeconfig |
FME_AICONFIG | fmeaiconfig |
Cloud & AI Cost Management
These resource types apply to Harness CACM, including AutoStopping and Cloud Asset Governance.
| Identifier | Permission key |
|---|---|
CCM_OVERVIEW | overview |
CCM_PERSPECTIVE | perspective |
CCM_FOLDER | folder |
CCM_BUDGET | budget |
CCM_COSTCATEGORY | costCategory |
CCM_UNIT_COST | unitCost |
CCM_AUTOSTOPPINGRULE | autoStoppingRule |
CCM_LOADBALANCER | loadBalancer |
CCM_CURRENCYPREFERENCE | currencyPreference |
CCM_CLOUD_ASSET_GOVERNANCE_RULE | cloudAssetGovernanceRule |
CCM_CLOUD_ASSET_GOVERNANCE_RULE_SET | cloudAssetGovernanceRuleSet |
CCM_CLOUD_ASSET_GOVERNANCE_RULE_ENFORCEMENT | cloudAssetGovernanceEnforcement |
CCM_CLOUD_ASSET_GOVERNANCE_OVERVIEW | cloudAssetGovernanceOverview |
CCM_CLOUD_ASSET_GOVERNANCE_ALERT | cloudAssetGovernanceAlert |
CCM_DATA_SCOPE | dataScope |
CCM_CLUSTER_ORCHESTRATOR | clusterOrchestrator |
CCM_ANOMALIES | anomalies |
CCM_RECOMMENDATIONS | recommendations |
CCM_COMMITMENT_ORCHESTRATOR | commitmentOrchestrator |
CCM_ANOMALIES_WHITELIST_RULE | anomaliesWhitelistRule |
Service Reliability Management
These resource types apply to Harness SRM.
| Identifier | Permission key |
|---|---|
MONITOREDSERVICE | monitoredservice |
SLO | slo |
DOWNTIME | downtime |
MONITORING_AGENT | monitoringagent |
METRIC_SOURCE | metricsource |
Incident Response
These resource types apply to Harness Incident Response.
| Identifier | Permission key |
|---|---|
IRO_MANAGER | iromanager |
IRO_ALERT | alert |
IRO_ALERT_RULE | alertrule |
IRO_INCIDENT | incident |
IRO_CONNECT_WORKSPACE | iroworkspace |
IRO_RUNBOOK | runbook |
IRO_SERVICE_DIRECTORY | servicedirectory |
IRO_THIRD_PARTY_INTEGRATIONS | thirdpartyintegrations |
IRO_ESCALATION_POLICY | iroescalationpolicy |
IRO_SCHEDULE | iroschedule |
IRO_SCHEDULE_OVERRIDE | iroscheduleoverride |
Resilience Testing
These resource types apply to Harness Resilience Testing.
| Identifier | Permission key |
|---|---|
CHAOS_HUB | chaoshub |
CHAOS_INFRASTRUCTURE | chaosinfrastructure |
CHAOS_EXPERIMENT | chaosexperiment |
CHAOS_GAMEDAY | chaosgameday |
CHAOS_PROBE | chaosprobe |
CHAOS_FAULT | chaosfault |
CHAOS_ACTION | chaosaction |
CHAOS_IMAGE_REGISTRY | chaosimageregistry |
CHAOS_SECURITY_GOVERNANCE | chaossecuritygovernance |
Continuous Error Tracking
These resource types apply to Harness CET.
| Identifier | Permission key |
|---|---|
CET_AGENT | agents |
CET_TOKEN | token |
CET_CRITICAL_EVENT | criticalevent |
Internal Developer Portal
These resource types apply to Harness IDP.
| Identifier | Permission key |
|---|---|
IDP_CATALOG | catalog |
IDP_ENVIRONMENT | idpenvironment |
IDP_ENVIRONMENT_BLUEPRINT | environmentblueprint |
IDP_WORKFLOW | workflow |
IDP_PLUGIN | plugin |
IDP_SCORECARD | scorecard |
IDP_LAYOUT | layout |
IDP_CATALOG_ACCESS_POLICY | catalogaccesspolicy |
IDP_INTEGRATION | integration |
IDP_ADVANCED_CONFIGURATION | advancedconfiguration |
IDP_AGGREGATION_RULE | aggregationrule |
Infrastructure as Code Management
These resource types apply to Harness IaCM.
| Identifier | Permission key |
|---|---|
IAC_WORKSPACE | workspace |
IAC_REGISTRY | registry |
IAC_PROVIDER_REGISTRY | providerregistry |
IAC_VARIABLE_SET | variableset |
AI DLC Insights and Software Engineering Insights
Every resource type in this group uses the SEI_ identifier prefix and the sei permission key prefix, because AI DLC Insights (AIDI) evolved from Software Engineering Insights (SEI). The prefix does not tell you which capability a resource type belongs to, so the following tables separate them.
Note that an identifier does not always match the label you see in the product. For example, SEI_CANVAS controls Studio.
AI DLC Insights
These resource types apply to Harness AIDI. Go to Harness RBAC for AI DLC Insights to review the scopes and out-of-the-box roles that use them.
| Identifier | Permission key | Product label |
|---|---|---|
SEI_CANVAS | seicanvas | Studio |
SEI_INSIGHTS_CATEGORY | seiinsightscategory | Insights Categories |
SEI_TEAMS | seiteams | Teams |
SEI_DATA_SETTINGS | seidatasettings | Data Settings |
SEI_DEVELOPERS | seidevelopers | Data Settings, developer records |
SEI_INTEGRATIONS | seiintegrations | Data Settings, integrations |
SEI_PROFILES | seiprofiles | Profiles |
Software Engineering Insights
These resource types apply to Harness SEI 1.0. Go to SEI roles and permissions to review the roles that use them.
| Identifier | Permission key | Product label |
|---|---|---|
SEI_COLLECTIONS | seicollections | Collections |
SEI_INSIGHTS | seiinsights | Insights |
SEI_CONFIGURATION_SETTINGS | seiconfigurationsettings | Configuration Settings |
The SEI_PANORAMA (seipanorama) and SEI_GOALS (seigoals) resource types also exist in this namespace.
Database DevOps
These resource types apply to Harness Database DevOps.
| Identifier | Permission key |
|---|---|
DB_SCHEMA | schema |
DB_INSTANCE | instance |
Cloud Development Environments
These resource types apply to Harness CDE Gitspaces.
| Identifier | Permission key |
|---|---|
CDE_GITSPACE | gitspace |
CDE_INFRAPROVIDER | infraprovider |