> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/harness-platform/use-harness-platform/platform-access-control/permissions-reference.md).

# Permissions reference

This topic describes permissions relevant to [RBAC in Harness](/harness-platform/use-harness-platform/platform-access-control.md). For API permissions, go to the [API permissions reference](/harness-platform/use-harness-platform/automation/api/api-permissions-reference.md).

{% hint style="info" %}
**TYPES OF PERMISSION**

**Types of permission**:

```
| **Status**       | **Description**                                               |
|------------------|---------------------------------------------------------------|
| **EXPERIMENTAL** | Available for role assignment but RBAC will not be enforced, that is the access checks always return true. |
| **ACTIVE**       | Available for role assignment with RBAC enforced.                                  |
| **DEPRECATED**   | Available for role assignment with RBAC enforced but the permission will be moved to the INACTIVE state after some time.  |
```

This reference lists permissions that are available for role assignment. The **Status** column shows a resource's primary status; when an individual permission has a different status, it is annotated inline after its identifier (for example, `gitops_application_exec`, Experimental).
{% endhint %}

### Administrative Functions <a href="#administrative-functions" id="administrative-functions"></a>

| Resource           | Permissions                                                                                                                            | Status |
| ------------------ | -------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Access Policies    | <ul><li>Analyze (<code>core\_accessPolicies\_analyze</code>)</li></ul>                                                                 | Active |
| Account Management | Available at the account [scope](/harness-platform/use-harness-platform/platform-access-control.md#permissions-hierarchy-scopes) only. |        |

* Create / Edit (\`core\_account\_edit\`)
* View (\`core\_account\_view\`)

\| Active | | Account Settings |

* View (\`core\_setting\_view\`)
* Create / Edit (\`core\_setting\_edit\`)

\| Active | | Audit | Available at the account and org \[scopes]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_audit\_view\`)

\| Active | | Authentication Settings | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_authsetting\_view\`)
* Create / Edit (\`core\_authsetting\_edit\`)
* Delete (\`core\_authsetting\_delete\`)

\| Active | | Banners | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_banner\_view\`)
* Create / Edit (\`core\_banner\_edit\`)
* Delete (\`core\_banner\_delete\`)

\| Active | | Branding | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* Edit (\`core\_branding\_edit\`)

\| Active | | Certificates |

* View (\`core\_certificate\_view\`)
* Create / Edit (\`core\_certificate\_edit\`)
* Delete (\`core\_certificate\_delete\`)

\| Active | | Data Sink | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_dataSink\_view\`)
* Create / Edit (\`core\_dataSink\_edit\`)
* Create (\`core\_dataSink\_create\`)
* Delete (\`core\_dataSink\_delete\`)

\| Active | | Delegate Transaction Queue |

* View (\`core\_delegatetransactionqueue\_view\`)
* Manage (\`core\_delegatetransactionqueue\_manage\`)

\| Active | | Deployment Freeze |

* Manage (\`core\_deploymentfreeze\_manage\`)
* Override (\`core\_deploymentfreeze\_override\`)
* Global (\`core\_deploymentfreeze\_global\`)

\| Active | | Licenses | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_license\_view\`)
* Create / Edit (\`core\_license\_edit\`)

\| Active | | OIDC ID Token |

* Create (\`core\_oidcIdToken\_create\`)

\| Active | | Organizations | Available at the account and org \[scopes]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* Delete (\`core\_organization\_delete\`)
* View (\`core\_organization\_view\`)
* Edit (\`core\_organization\_edit\`)
* Create (\`core\_organization\_create\`)

\| Active | | Platform Alert Settings | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_alertSetting\_view\`)
* Edit (\`core\_alertSetting\_edit\`)

\| Active | | Projects |

* Delete (\`core\_project\_delete\`)
* View (\`core\_project\_view\`)
* Edit (\`core\_project\_edit\`)
* Create (\`core\_project\_create\`)
* Move (\`core\_project\_move\`)

\| Active | | Providers | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_provider\_view\`)
* Create / Edit (\`core\_provider\_edit\`)
* Delete (\`core\_provider\_delete\`)

\| Active | | Resource Groups |

* View (\`core\_resourcegroup\_view\`)
* Create / Edit (\`core\_resourcegroup\_edit\`)
* Delete (\`core\_resourcegroup\_delete\`)

\| Active | | Roles |

* View (\`core\_role\_view\`)
* Create / Edit (\`core\_role\_edit\`)
* Delete (\`core\_role\_delete\`)

\| Active | | SMTP Configuration | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_smtp\_view\`)
* Create / Edit (\`core\_smtp\_edit\`)
* Delete (\`core\_smtp\_delete\`)

\| Active | | Service Accounts |

* View (\`core\_serviceaccount\_view\`)
* List (\`core\_serviceaccount\_list\`)
* Create / Edit (\`core\_serviceaccount\_edit\`)
* Delete (\`core\_serviceaccount\_delete\`)
* Manage (\`core\_serviceaccount\_manageapikey\`)

\| Active | | Streaming Destination | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`core\_streamingDestination\_view\`)
* Create / Edit (\`core\_streamingDestination\_edit\`)
* Delete (\`core\_streamingDestination\_delete\`)

\| Active | | User Groups |

* View (\`core\_usergroup\_view\`)
* Manage (\`core\_usergroup\_manage\`)
* Create (\`core\_usergroup\_create\`)
* Edit Metadata (\`core\_usergroup\_editMetadata\`)
* Delete (\`core\_usergroup\_delete\`)
* Manage SSO (\`core\_usergroup\_manageSSO\`)
* Manage SCIM (\`core\_usergroup\_manageSCIM\`)
* Manage Members (\`core\_usergroup\_manageUsers\`)
* Manage Notifications (\`core\_usergroup\_manageNotifications\`)
* Manage Roles (\`core\_usergroup\_manageRoleAssignments\`)

\| Active | | Users |

* View (\`core\_user\_view\`)
* Manage (\`core\_user\_manage\`)
* Invite (\`core\_user\_invite\`)
* Impersonate (\`core\_user\_impersonate\`)

\| Active |

### Monitoring <a href="#monitoring" id="monitoring"></a>

| Resource                 | Permissions                                                                                                                                                                                                                                                               | Status       |
| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| Monitoring Agents        | <ul><li>Edit (<code>monitoring\_monitoringagent\_edit</code>)</li><li>Delete (<code>monitoring\_monitoringagent\_delete</code>)</li><li>View (<code>monitoring\_monitoringagent\_view</code>)</li><li>Create (<code>monitoring\_monitoringagent\_create</code>)</li></ul> | Experimental |
| Service Level Objectives | <ul><li>Edit (<code>iro\_iromanager\_edit</code>)</li><li>Delete (<code>iro\_iromanager\_delete</code>)</li><li>View (<code>iro\_iromanager\_view</code>)</li><li>Create (<code>iro\_iromanager\_create</code>)</li></ul>                                                 | Active       |

### Environment Groups <a href="#environment-groups" id="environment-groups"></a>

| Resource           | Permissions                                                                                                                                                                                                                                                    | Status |
| ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Environment Groups | <ul><li>View (<code>core\_environmentgroup\_view</code>)</li><li>Create / Edit (<code>core\_environmentgroup\_edit</code>)</li><li>Delete (<code>core\_environmentgroup\_delete</code>)</li><li>Access (<code>core\_environmentgroup\_access</code>)</li></ul> | Active |

### Environments <a href="#environments" id="environments"></a>

| Resource     | Permissions                                                                                                                                                                                                                                                                                                  | Status |
| ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| Environments | <ul><li>View (<code>core\_environment\_view</code>)</li><li>Create / Edit (<code>core\_environment\_edit</code>)</li><li>Delete (<code>core\_environment\_delete</code>)</li><li>Access (<code>core\_environment\_access</code>)</li><li>Rollback Label (<code>core\_environment\_rollback</code>)</li></ul> | Active |

### Pipelines <a href="#pipelines" id="pipelines"></a>

| Resource  | Permissions                                                                                                                                                                                                                                                                                                                     | Status |
| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Pipelines | <ul><li>View (<code>core\_pipeline\_view</code>)</li><li>Edit (<code>core\_pipeline\_edit</code>)</li><li>Delete (<code>core\_pipeline\_delete</code>)</li><li>Execute (<code>core\_pipeline\_execute</code>)</li><li>Abort (<code>core\_pipeline\_abort</code>)</li><li>Create (<code>core\_pipeline\_create</code>)</li></ul> | Active |
| Releases  | <ul><li>View (<code>core\_releases\_view</code>)</li><li>Create (<code>core\_releases\_create</code>)</li><li>Edit (<code>core\_releases\_edit</code>)</li><li>Delete (<code>core\_releases\_delete</code>)</li><li>Execute (<code>core\_releases\_execute</code>)</li></ul>                                                    | Active |

### Services <a href="#services" id="services"></a>

| Resource | Permissions                                                                                                                                                                                                                | Status |
| -------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Services | <ul><li>View (<code>core\_service\_view</code>)</li><li>Create / Edit (<code>core\_service\_edit</code>)</li><li>Delete (<code>core\_service\_delete</code>)</li><li>Access (<code>core\_service\_access</code>)</li></ul> | Active |

### Shared Resources <a href="#shared-resources" id="shared-resources"></a>

| Resource   | Permissions                                                                                                                                                                                                                        | Status |
| ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Connectors | <ul><li>Access (<code>core\_connector\_access</code>)</li><li>View (<code>core\_connector\_view</code>)</li><li>Create / Edit (<code>core\_connector\_edit</code>)</li><li>Delete (<code>core\_connector\_delete</code>)</li></ul> | Active |
| Dashboards | Available at the account and org [scopes](/harness-platform/use-harness-platform/platform-access-control.md#permissions-hierarchy-scopes) only.                                                                                    |        |

* View (\`core\_dashboards\_view\`)
* Create (\`core\_dashboards\_create\`)
* Delete (\`core\_dashboards\_delete\`)
* Edit (\`core\_dashboards\_edit\`)

\| Active | | Delegate Configurations |

* View (\`core\_delegateconfiguration\_view\`)
* Create / Edit (\`core\_delegateconfiguration\_edit\`)
* Delete (\`core\_delegateconfiguration\_delete\`)

\| Active | | Delegates |

* View (\`core\_delegate\_view\`)
* Create / Edit (\`core\_delegate\_edit\`)
* Delete (\`core\_delegate\_delete\`)

\| Active | | Files |

* View (\`core\_file\_view\`)
* Create / Edit (\`core\_file\_edit\`)
* Delete (\`core\_file\_delete\`)
* Access (\`core\_file\_access\`)

\| Active | | Secrets |

* Delete (\`core\_secret\_delete\`)
* View (\`core\_secret\_view\`)
* Create (\`core\_secret\_create\`)
* Edit (\`core\_secret\_edit\`)
* Access (\`core\_secret\_access\`)

\| Active | | Templates |

* View (\`core\_template\_view\`)
* Copy (\`core\_template\_copy\`)
* Edit (\`core\_template\_edit\`)
* Delete (\`core\_template\_delete\`)
* Access (\`core\_template\_access\`)
* Create (\`core\_template\_create\`)

\| Active | | Variables |

* View (\`core\_variable\_view\`)
* Create / Edit (\`core\_variable\_edit\`)
* Delete (\`core\_variable\_delete\`)

\| Active |

### Policies <a href="#policies" id="policies"></a>

| Resource               | Permissions                                                                                                                                                                                                                                                                                                                                | Status |
| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| Governance Policies    | <ul><li>Create (<code>core\_governancePolicy\_create</code>)</li><li>Edit (<code>core\_governancePolicy\_edit</code>)</li><li>View (<code>core\_governancePolicy\_view</code>)</li><li>Delete (<code>core\_governancePolicy\_delete</code>)</li></ul>                                                                                      | Active |
| Governance Policy Sets | <ul><li>Create (<code>core\_governancePolicySets\_create</code>)</li><li>Edit (<code>core\_governancePolicySets\_edit</code>)</li><li>View (<code>core\_governancePolicySets\_view</code>)</li><li>Delete (<code>core\_governancePolicySets\_delete</code>)</li><li>Evaluate (<code>core\_governancePolicySets\_evaluate</code>)</li></ul> | Active |

### Discovery <a href="#discovery" id="discovery"></a>

| Resource    | Permissions                                                                                                                                                                                                                                                                   | Status |
| ----------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Network Map | <ul><li>Create (<code>servicediscovery\_networkmap\_create</code>)</li><li>Edit (<code>servicediscovery\_networkmap\_edit</code>)</li><li>Delete (<code>servicediscovery\_networkmap\_delete</code>)</li><li>View (<code>servicediscovery\_networkmap\_view</code>)</li></ul> | Active |

### Supply Chain Security <a href="#supply-chain-security" id="supply-chain-security"></a>

| Resource            | Permissions                                                                                                                                                                                                                                   | Status |
| ------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Remediation Tracker | <ul><li>Create / Edit (<code>ssca\_remediationtracker\_edit</code>)</li><li>View (<code>ssca\_remediationtracker\_view</code>)</li><li>Close (<code>ssca\_remediationtracker\_close</code>)</li></ul>                                         | Active |
| SCS Configuration   | <ul><li>View (<code>ssca\_scsconfiguration\_view</code>)</li><li>Create (<code>ssca\_scsconfiguration\_create</code>)</li><li>Edit (<code>ssca\_scsconfiguration\_edit</code>)</li></ul>                                                      | Active |
| SCS Evidence Vault  | <ul><li>View (<code>ssca\_scsevidencevault\_view</code>)</li><li>Download (<code>ssca\_scsevidencevault\_download</code>)</li><li>Upload (<code>ssca\_scsevidencevault\_upload</code>)</li></ul>                                              | Active |
| SCS External Ticket | <ul><li>View (<code>ssca\_scsexternalticket\_view</code>)</li><li>Create (<code>ssca\_scsexternalticket\_create</code>)</li><li>Edit (<code>ssca\_scsexternalticket\_edit</code>)</li></ul>                                                   | Active |
| SCS Integration     | <ul><li>View (<code>ssca\_scsintegration\_view</code>)</li><li>Create (<code>ssca\_scsintegration\_create</code>)</li><li>Edit (<code>ssca\_scsintegration\_edit</code>)</li><li>Delete (<code>ssca\_scsintegration\_delete</code>)</li></ul> | Active |
| SCS Pull Request    | <ul><li>View (<code>ssca\_scsprcreation\_view</code>)</li><li>Create (<code>ssca\_scsprcreation\_create</code>)</li><li>Edit (<code>ssca\_scsprcreation\_edit</code>)</li></ul>                                                               | Active |

### Webhooks <a href="#webhooks" id="webhooks"></a>

| Resource | Permissions                                                                                                                                                                           | Status |
| -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Webhooks | <ul><li>Create / Edit (<code>core\_gitxWebhooks\_edit</code>)</li><li>Delete (<code>core\_gitxWebhooks\_delete</code>)</li><li>View (<code>core\_gitxWebhooks\_view</code>)</li></ul> | Active |

### Notifications <a href="#notifications" id="notifications"></a>

| Resource                          | Permissions                                                                                                                                                                                                                                 | Status     |
| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------- |
| Default Notification Template Set | <ul><li>View (<code>core\_defaultNotificationTemplateSet\_view</code>)</li><li>Create / Edit (<code>core\_defaultNotificationTemplateSet\_edit</code>)</li><li>Delete (<code>core\_defaultNotificationTemplateSet\_delete</code>)</li></ul> | Active     |
| Legacy Notifications              | <ul><li>View (<code>core\_notification\_view</code>)</li><li>Create / Edit (<code>core\_notification\_edit</code>)</li><li>Delete (<code>core\_notification\_delete</code>)</li></ul>                                                       | Deprecated |
| Notification Channels             | <ul><li>View (<code>core\_notificationchannel\_view</code>)</li><li>Create / Edit (<code>core\_notificationchannel\_edit</code>)</li><li>Delete (<code>core\_notificationchannel\_delete</code>)</li></ul>                                  | Active     |
| Notification Rules                | <ul><li>View (<code>core\_notificationrule\_view</code>)</li><li>Create / Edit (<code>core\_notificationrule\_edit</code>)</li><li>Delete (<code>core\_notificationrule\_delete</code>)</li></ul>                                           | Active     |

### Input Sets <a href="#input-sets" id="input-sets"></a>

| Resource   | Permissions                                                                                                                                                               | Status |
| ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Input Sets | <ul><li>Create / Edit (<code>core\_inputset\_edit</code>)</li><li>Delete (<code>core\_inputset\_delete</code>)</li><li>View (<code>core\_inputset\_view</code>)</li></ul> | Active |

### Module-specific permissions <a href="#module-specific-permissions" id="module-specific-permissions"></a>

#### Chaos Engineering <a href="#chaos-engineering" id="chaos-engineering"></a>

| Resource                  | Permissions                                                                                                                                                                                                                                                                              | Status       |
| ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| Chaos Action              | <ul><li>View (<code>chaos\_chaosaction\_view</code>)</li><li>Create / Edit (<code>chaos\_chaosaction\_edit</code>)</li><li>Delete (<code>chaos\_chaosaction\_delete</code>)</li></ul>                                                                                                    | Active       |
| Chaos Environment         | <ul><li>Execute Chaos Experiment (<code>chaos\_environment\_executeChaosExperiment</code>)</li></ul>                                                                                                                                                                                     | Active       |
| Chaos Experiment          | <ul><li>View (<code>chaos\_chaosexperiment\_view</code>)</li><li>Create / Edit (<code>chaos\_chaosexperiment\_edit</code>)</li><li>Delete (<code>chaos\_chaosexperiment\_delete</code>)</li><li>Execute (<code>chaos\_chaosexperiment\_execute</code>)</li></ul>                         | Active       |
| Chaos Fault               | <ul><li>View (<code>chaos\_chaosfault\_view</code>)</li><li>Create / Edit (<code>chaos\_chaosfault\_edit</code>)</li><li>Delete (<code>chaos\_chaosfault\_delete</code>)</li></ul>                                                                                                       | Active       |
| Chaos Gameday             | <ul><li>View (<code>chaos\_chaosgameday\_view</code>)</li><li>Create / Edit (<code>chaos\_chaosgameday\_edit</code>)</li><li>Delete (<code>chaos\_chaosgameday\_delete</code>)</li><li>Execute (<code>chaos\_chaosgameday\_execute</code>)</li></ul>                                     | Active       |
| Chaos Hub                 | <ul><li>View (<code>chaos\_chaoshub\_view</code>)</li><li>Create / Edit (<code>chaos\_chaoshub\_edit</code>)</li><li>Delete (<code>chaos\_chaoshub\_delete</code>)</li><li>Access (<code>chaos\_chaoshub\_access</code>)</li><li>Manage (<code>chaos\_chaoshub\_manage</code>)</li></ul> | Active       |
| Chaos Image Registry      | <ul><li>View (<code>chaos\_chaosimageregistry\_view</code>)</li><li>Create / Edit (<code>chaos\_chaosimageregistry\_edit</code>)</li></ul>                                                                                                                                               | Active       |
| Chaos Infrastructure      | <ul><li>View (<code>chaos\_chaosinfrastructure\_view</code>)</li><li>Create / Edit (<code>chaos\_chaosinfrastructure\_edit</code>)</li><li>Delete (<code>chaos\_chaosinfrastructure\_delete</code>)</li></ul>                                                                            | Active       |
| Chaos Probe               | <ul><li>View (<code>chaos\_chaosprobe\_view</code>)</li><li>Create / Edit (<code>chaos\_chaosprobe\_edit</code>)</li><li>Delete (<code>chaos\_chaosprobe\_delete</code>)</li><li>Verify (<code>chaos\_chaosprobe\_verify</code>)</li></ul>                                               | Active       |
| Chaos Security Governance | <ul><li>Create / Edit (<code>chaos\_chaossecuritygovernance\_edit</code>)</li><li>Delete (<code>chaos\_chaossecuritygovernance\_delete</code>)</li><li>View (<code>chaos\_chaossecuritygovernance\_view</code>)</li></ul>                                                                | Active       |
| DR Test                   | <ul><li>View (<code>chaos\_drtest\_view</code>)</li><li>Create / Edit (<code>chaos\_drtest\_edit</code>)</li><li>Delete (<code>chaos\_drtest\_delete</code>)</li></ul>                                                                                                                   | Experimental |

#### Cloud Cost Management <a href="#cloud-cost-management" id="cloud-cost-management"></a>

| Resource  | Permissions                                                                                                                            | Status |
| --------- | -------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Anomalies | Available at the account [scope](/harness-platform/use-harness-platform/platform-access-control.md#permissions-hierarchy-scopes) only. |        |

* View (\`ccm\_anomalies\_view\`)
* Manage (\`ccm\_anomalies\_manage\`)

\| Active | | Anomalies Ignore List Rules | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_anomaliesWhitelistRule\_view\`)
* Manage (\`ccm\_anomaliesWhitelistRule\_manage\`)

\| Active | | AutoStopping Rules | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_autoStoppingRule\_view\`)
* Create / Edit (\`ccm\_autoStoppingRule\_edit\`)
* Delete (\`ccm\_autoStoppingRule\_delete\`)

\| Active | | Budgets | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_budget\_view\`)
* Create / Edit (\`ccm\_budget\_edit\`)
* Delete (\`ccm\_budget\_delete\`)

\| Active | | Cloud Asset Governance Alert | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* Create / Edit (\`ccm\_cloudAssetGovernanceAlert\_edit\`)
* View (\`ccm\_cloudAssetGovernanceAlert\_view\`)
* Delete (\`ccm\_cloudAssetGovernanceAlert\_delete\`)

\| Active | | Cloud Asset Governance Enforcement | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* Create / Edit (\`ccm\_cloudAssetGovernanceEnforcement\_edit\`)
* View (\`ccm\_cloudAssetGovernanceEnforcement\_view\`)
* Delete (\`ccm\_cloudAssetGovernanceEnforcement\_delete\`)

\| Active | | Cloud Asset Governance Overview | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_cloudAssetGovernanceOverview\_view\`)

\| Active | | Cloud Asset Governance Rule | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* Create / Edit (\`ccm\_cloudAssetGovernanceRule\_edit\`)
* View (\`ccm\_cloudAssetGovernanceRule\_view\`)
* Delete (\`ccm\_cloudAssetGovernanceRule\_delete\`)
* Execute (\`ccm\_cloudAssetGovernanceRule\_execute\`)
* Dry Execute (\`ccm\_cloudAssetGovernanceRule\_dryExecute\`)

\| Active | | Cloud Asset Governance Rule Set | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* Create / Edit (\`ccm\_cloudAssetGovernanceRuleSet\_edit\`)
* View (\`ccm\_cloudAssetGovernanceRuleSet\_view\`)
* Delete (\`ccm\_cloudAssetGovernanceRuleSet\_delete\`)

\| Active | | Cluster Orchestrator | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* Create / Edit (\`ccm\_clusterOrchestrator\_edit\`)
* View (\`ccm\_clusterOrchestrator\_view\`)

\| Active | | Commitment Orchestrator | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* Create / Edit (\`ccm\_commitmentOrchestrator\_edit\`)
* View (\`ccm\_commitmentOrchestrator\_view\`)

\| Active | | Cost Categories | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_costCategory\_view\`)
* Create / Edit (\`ccm\_costCategory\_edit\`)
* Delete (\`ccm\_costCategory\_delete\`)

\| Active | | Currency Preferences | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_currencyPreference\_view\`)
* Create / Edit (\`ccm\_currencyPreference\_edit\`)

\| Active | | Data Job Status | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_dataJobStatus\_view\`)

\| Active | | Data Scope | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_dataScope\_view\`)

\| Active | | Folders | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_folder\_view\`)
* Create / Edit (\`ccm\_folder\_edit\`)
* Delete (\`ccm\_folder\_delete\`)

\| Active | | Load Balancer | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_loadBalancer\_view\`)
* Create / Edit (\`ccm\_loadBalancer\_edit\`)
* Delete (\`ccm\_loadBalancer\_delete\`)

\| Active | | Overview | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_overview\_view\`)

\| Active | | Perspectives | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_perspective\_view\`)
* Create / Edit (\`ccm\_perspective\_edit\`)
* Delete (\`ccm\_perspective\_delete\`)

\| Active | | Recommendations | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_recommendations\_view\`)
* Manage (\`ccm\_recommendations\_manage\`)

\| Active | | Unit Cost | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`ccm\_unitCost\_view\`)
* Create / Edit (\`ccm\_unitCost\_edit\`)
* Delete (\`ccm\_unitCost\_delete\`)

\| Active |

#### Cloud Development Environments <a href="#cloud-development-environments" id="cloud-development-environments"></a>

| Resource                | Permissions                                                                                                                                                                                                                                                         | Status       |
| ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| Gitspace                | <ul><li>Create (<code>cde\_gitspace\_create</code>)</li><li>View (<code>cde\_gitspace\_view</code>)</li><li>Execute (<code>cde\_gitspace\_use</code>)</li><li>Edit (<code>cde\_gitspace\_edit</code>)</li><li>Delete (<code>cde\_gitspace\_delete</code>)</li></ul> | Experimental |
| Infrastructure Provider | <ul><li>View (<code>cde\_infraprovider\_view</code>)</li><li>Edit (<code>cde\_infraprovider\_edit</code>)</li><li>Delete (<code>cde\_infraprovider\_delete</code>)</li></ul>                                                                                        | Experimental |

#### Code Repository <a href="#code-repository" id="code-repository"></a>

| Resource   | Permissions                                                                                                                                                                                                                                                                                                                                                                  | Status |
| ---------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Repository | <ul><li>View (<code>code\_repo\_view</code>)</li><li>Review (<code>code\_repo\_review</code>)</li><li>Edit (<code>code\_repo\_edit</code>)</li><li>Create (<code>code\_repo\_create</code>)</li><li>Delete (<code>code\_repo\_delete</code>)</li><li>Push (<code>code\_repo\_push</code>)</li><li>Report Commit Check (<code>code\_repo\_reportCommitCheck</code>)</li></ul> | Active |

#### Feature Flags <a href="#feature-flags" id="feature-flags"></a>

| Resource       | Permissions                                                                                                                                                                                                                                                                                                                                                                                                          | Status |
| -------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Environment    | <ul><li>Target Group Edit (<code>ff\_environment\_targetGroupEdit</code>)</li><li>API Key View (<code>ff\_environment\_apiKeyView</code>)</li><li>Create FF SDK Key (<code>ff\_environment\_apiKeyCreate</code>)</li><li>Delete FF SDK Key (<code>ff\_environment\_apiKeyDelete</code>)</li><li>Create / Edit (<code>ff\_environment\_edit</code>)</li><li>View (<code>ff\_environment\_view</code>)</li></ul>       | Active |
| Feature Flag   | <ul><li>Create (<code>ff\_featureflag\_create</code>)</li><li>Edit Config (<code>ff\_featureflag\_configEdit</code>)</li><li>Edit Rules (<code>ff\_featureflag\_rulesEdit</code>)</li><li>Create / Edit (<code>ff\_featureflag\_edit</code>)</li><li>Delete (<code>ff\_featureflag\_delete</code>)</li><li>View (<code>ff\_featureflag\_view</code>)</li><li>Toggle (<code>ff\_featureflag\_toggle</code>)</li></ul> | Active |
| Proxy API Keys | Available at the account and org [scopes](/harness-platform/use-harness-platform/platform-access-control.md#permissions-hierarchy-scopes) only.                                                                                                                                                                                                                                                                      |        |

* Create (\`ff\_proxyapikey\_create\`)
* Edit (\`ff\_proxyapikey\_edit\`)
* Delete (\`ff\_proxyapikey\_delete\`)
* Rotate (\`ff\_proxyapikey\_rotate\`)
* View (\`ff\_proxyapikey\_view\`)

\| Active | | Target |

* View (\`ff\_target\_view\`)

\| Active | | Target Management |

* View (\`ff\_targetgroup\_view\`)
* Create / Edit (\`ff\_targetgroup\_edit\`)
* Delete (\`ff\_targetgroup\_delete\`)

\| Active |

#### GitOps <a href="#gitops" id="gitops"></a>

| Resource                | Permissions                                                                                                                                                                                                                                                                                                                                                                                                 | Status |
| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Agents                  | <ul><li>View (<code>gitops\_agent\_view</code>)</li><li>Create / Edit (<code>gitops\_agent\_edit</code>)</li><li>Delete (<code>gitops\_agent\_delete</code>)</li></ul>                                                                                                                                                                                                                                      | Active |
| Application Sets        | <ul><li>View (<code>gitops\_applicationset\_view</code>)</li><li>Create / Edit (<code>gitops\_applicationset\_edit</code>)</li><li>Delete (<code>gitops\_applicationset\_delete</code>)</li></ul>                                                                                                                                                                                                           | Active |
| Applications            | <ul><li>View (<code>gitops\_application\_view</code>)</li><li>Create / Edit (<code>gitops\_application\_edit</code>)</li><li>Delete (<code>gitops\_application\_delete</code>)</li><li>Sync (<code>gitops\_application\_sync</code>)</li><li>Exec (<code>gitops\_application\_exec</code>), Experimental</li><li>Resource Action (<code>gitops\_application\_resourceaction</code>), Experimental</li></ul> | Active |
| Argo Project            | <ul><li>View (<code>gitops\_argoproject\_view</code>)</li><li>Create / Edit (<code>gitops\_argoproject\_edit</code>)</li><li>Delete (<code>gitops\_argoproject\_delete</code>)</li></ul>                                                                                                                                                                                                                    | Active |
| Certificates            | <ul><li>View (<code>gitops\_cert\_view</code>)</li><li>Create / Edit (<code>gitops\_cert\_edit</code>)</li><li>Delete (<code>gitops\_cert\_delete</code>)</li></ul>                                                                                                                                                                                                                                         | Active |
| Clusters                | <ul><li>View (<code>gitops\_cluster\_view</code>)</li><li>Create / Edit (<code>gitops\_cluster\_edit</code>)</li><li>Delete (<code>gitops\_cluster\_delete</code>)</li></ul>                                                                                                                                                                                                                                | Active |
| Repositories            | <ul><li>View (<code>gitops\_repository\_view</code>)</li><li>Create / Edit (<code>gitops\_repository\_edit</code>)</li><li>Delete (<code>gitops\_repository\_delete</code>)</li></ul>                                                                                                                                                                                                                       | Active |
| Repository Certificates | <ul><li>View (<code>gitops\_gpgkey\_view</code>)</li><li>Create / Edit (<code>gitops\_gpgkey\_edit</code>)</li><li>Delete (<code>gitops\_gpgkey\_delete</code>)</li></ul>                                                                                                                                                                                                                                   | Active |

#### Infrastructure as Code <a href="#infrastructure-as-code" id="infrastructure-as-code"></a>

| Resource               | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | Status       |
| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| IACM Inventory         | <ul><li>View (<code>iac\_inventory\_view</code>)</li><li>Create / Edit (<code>iac\_inventory\_edit</code>)</li><li>Delete (<code>iac\_inventory\_delete</code>)</li><li>Edit Var (<code>iac\_inventory\_editvariable</code>)</li><li>Delete Var (<code>iac\_inventory\_deletevariable</code>)</li><li>Approve (<code>iac\_inventory\_approve</code>)</li></ul>                                                                                                                                                | Active       |
| IACM Playbook          | <ul><li>View (<code>iac\_playbook\_view</code>)</li><li>Create / Edit (<code>iac\_playbook\_edit</code>)</li><li>Delete (<code>iac\_playbook\_delete</code>)</li><li>Edit Var (<code>iac\_playbook\_editvariable</code>)</li><li>Delete Var (<code>iac\_playbook\_deletevariable</code>)</li><li>Approve (<code>iac\_playbook\_approve</code>)</li></ul>                                                                                                                                                      | Active       |
| IACM Provider Registry | <ul><li>Create / Edit (<code>iac\_providerregistry\_edit</code>)</li><li>Delete (<code>iac\_providerregistry\_delete</code>)</li><li>View (<code>iac\_providerregistry\_view</code>)</li></ul>                                                                                                                                                                                                                                                                                                                | Experimental |
| IACM Workspaces        | <ul><li>View (<code>iac\_workspace\_view</code>)</li><li>Create / Edit (<code>iac\_workspace\_edit</code>)</li><li>Delete (<code>iac\_workspace\_delete</code>)</li><li>Edit Var (<code>iac\_workspace\_editvariable</code>)</li><li>Delete Var (<code>iac\_workspace\_deletevariable</code>)</li><li>Approve (<code>iac\_workspace\_approve</code>)</li><li>Workspace Access State (<code>iac\_workspace\_accessstate</code>)</li><li>Remote Plan (<code>iac\_workspace\_executeremoteplan</code>)</li></ul> | Active       |
| Registry               | <ul><li>Create / Edit (<code>iac\_registry\_edit</code>)</li><li>Delete (<code>iac\_registry\_delete</code>)</li><li>View (<code>iac\_registry\_view</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                        | Active       |
| Variable Sets          | <ul><li>View (<code>iac\_variableset\_view</code>)</li><li>Create / Edit (<code>iac\_variableset\_edit</code>)</li><li>Delete (<code>iac\_variableset\_delete</code>)</li></ul>                                                                                                                                                                                                                                                                                                                               | Experimental |

#### Service Reliability <a href="#service-reliability" id="service-reliability"></a>

| Resource           | Permissions                                                                                                                                                                                                                                                | Status |
| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Downtime           | <ul><li>View (<code>chi\_downtime\_view</code>)</li><li>Create / Edit (<code>chi\_downtime\_edit</code>)</li><li>Delete (<code>chi\_downtime\_delete</code>)</li></ul>                                                                                     | Active |
| Monitored Services | <ul><li>View (<code>chi\_monitoredservice\_view</code>)</li><li>Create / Edit (<code>chi\_monitoredservice\_edit</code>)</li><li>Delete (<code>chi\_monitoredservice\_delete</code>)</li><li>Toggle (<code>chi\_monitoredservice\_toggle</code>)</li></ul> | Active |
| SLO                | <ul><li>View (<code>chi\_slo\_view</code>)</li><li>Create / Edit (<code>chi\_slo\_edit</code>)</li><li>Delete (<code>chi\_slo\_delete</code>)</li></ul>                                                                                                    | Active |

#### Incident Response <a href="#incident-response" id="incident-response"></a>

| Resource                      | Permissions                                                                                                                                                                                                                                                                  | Status       |
| ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ |
| Alert                         | <ul><li>View (<code>iro\_alert\_view</code>)</li><li>Create / Edit (<code>iro\_alert\_edit</code>)</li><li>Configure (<code>iro\_alert\_config</code>)</li></ul>                                                                                                             | Active       |
| Alert Rule                    | <ul><li>Create (<code>iro\_alertrule\_create</code>)</li><li>Edit (<code>iro\_alertrule\_edit</code>)</li><li>Delete (<code>iro\_alertrule\_delete</code>)</li></ul>                                                                                                         | Active       |
| Escalation Policy             | <ul><li>View (<code>iro\_iroescalationpolicy\_view</code>)</li><li>Create (<code>iro\_iroescalationpolicy\_create</code>)</li><li>Edit (<code>iro\_iroescalationpolicy\_edit</code>)</li><li>Delete (<code>iro\_iroescalationpolicy\_delete</code>)</li></ul>                | Active       |
| Incident                      | <ul><li>View (<code>iro\_incident\_view</code>)</li><li>Create / Edit (<code>iro\_incident\_edit</code>)</li><li>Configure (<code>iro\_incident\_config</code>)</li><li>Send Status Update (<code>iro\_incident\_sendstatusupdate</code>), Experimental</li></ul>            | Active       |
| Incident Response Access      | <ul><li>Manage (<code>iro\_iroaccess\_manage</code>)</li></ul>                                                                                                                                                                                                               | Active       |
| Incident Response Integration | <ul><li>View (<code>iro\_irointegration\_view</code>)</li><li>Create (<code>iro\_irointegration\_create</code>)</li><li>Edit (<code>iro\_irointegration\_edit</code>)</li><li>Delete (<code>iro\_irointegration\_delete</code>)</li></ul>                                    | Active       |
| Incident Response Workspace   | <ul><li>Configure (<code>iro\_iroworkspace\_config</code>)</li></ul>                                                                                                                                                                                                         | Active       |
| Metric Source                 | <ul><li>Edit (<code>iro\_metricsource\_edit</code>)</li><li>Delete (<code>iro\_metricsource\_delete</code>)</li><li>View (<code>iro\_metricsource\_view</code>)</li><li>Create (<code>iro\_metricsource\_create</code>)</li></ul>                                            | Active       |
| On-Call Schedule              | <ul><li>View (<code>iro\_iroschedule\_view</code>)</li><li>Create (<code>iro\_iroschedule\_create</code>)</li><li>Edit (<code>iro\_iroschedule\_edit</code>)</li><li>Delete (<code>iro\_iroschedule\_delete</code>)</li></ul>                                                | Active       |
| On-Call Schedule Override     | <ul><li>View (<code>iro\_iroscheduleoverride\_view</code>)</li><li>Create (<code>iro\_iroscheduleoverride\_create</code>)</li><li>Edit (<code>iro\_iroscheduleoverride\_edit</code>)</li><li>Delete (<code>iro\_iroscheduleoverride\_delete</code>)</li></ul>                | Active       |
| Runbook                       | <ul><li>View (<code>iro\_runbook\_view</code>)</li><li>Edit (<code>iro\_runbook\_edit</code>)</li><li>Delete (<code>iro\_runbook\_delete</code>)</li><li>Trigger (<code>iro\_runbook\_trigger</code>)</li></ul>                                                              | Active       |
| Service Directory             | <ul><li>View (<code>iro\_servicedirectory\_view</code>)</li><li>Edit (<code>iro\_servicedirectory\_edit</code>)</li><li>Delete (<code>iro\_servicedirectory\_delete</code>)</li><li>Manage Subscriptions (<code>iro\_servicedirectory\_managesubscriptions</code>)</li></ul> | Experimental |
| Third-Party Integrations      | <ul><li>View (<code>iro\_thirdpartyintegrations\_view</code>)</li><li>Edit (<code>iro\_thirdpartyintegrations\_edit</code>)</li><li>Delete (<code>iro\_thirdpartyintegrations\_delete</code>)</li></ul>                                                                      | Experimental |

#### Security Tests <a href="#security-tests" id="security-tests"></a>

| Resource         | Permissions                                                                                                                                                                             | Status |
| ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Exemptions       | <ul><li>View (<code>sto\_exemption\_view</code>)</li><li>Create / Edit (<code>sto\_exemption\_create</code>)</li><li>Approve / Reject (<code>sto\_exemption\_approve</code>)</li></ul>  | Active |
| External Tickets | <ul><li>View (<code>sto\_ticket\_view</code>)</li><li>Create / Edit (<code>sto\_ticket\_edit</code>)</li><li>Delete (<code>sto\_ticket\_delete</code>)</li></ul>                        | Active |
| Issues           | <ul><li>View (<code>sto\_issue\_view</code>)</li><li>Create / Edit (<code>sto\_issue\_edit</code>)</li></ul>                                                                            | Active |
| Scans            | <ul><li>View (<code>sto\_scan\_view</code>)</li><li>Create / Edit (<code>sto\_scan\_edit</code>)</li></ul>                                                                              | Active |
| Test Targets     | <ul><li>View (<code>sto\_testtarget\_view</code>)</li><li>Create / Edit (<code>sto\_testtarget\_edit</code>)</li><li>Approve / Reject (<code>sto\_testtarget\_approve</code>)</li></ul> | Active |

#### Internal Developer Portal <a href="#internal-developer-portal" id="internal-developer-portal"></a>

| Resource                | Permissions                                                                                                                                                                                                                                                                                                | Status |
| ----------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Advanced Configurations | <ul><li>View (<code>idp\_advancedconfiguration\_view</code>)</li><li>Create / Edit (<code>idp\_advancedconfiguration\_edit</code>)</li><li>Delete (<code>idp\_advancedconfiguration\_delete</code>)</li></ul>                                                                                              | Active |
| Aggregation Rule        | <ul><li>View (<code>idp\_aggregationrule\_view</code>)</li><li>Create (<code>idp\_aggregationrule\_create</code>)</li><li>Edit (<code>idp\_aggregationrule\_edit</code>)</li><li>Delete (<code>idp\_aggregationrule\_delete</code>)</li><li>Compute (<code>idp\_aggregationrule\_compute</code>)</li></ul> | Active |
| Catalog                 | <ul><li>View (<code>idp\_catalog\_view</code>)</li><li>Create / Edit (<code>idp\_catalog\_edit</code>)</li><li>Delete (<code>idp\_catalog\_delete</code>)</li></ul>                                                                                                                                        | Active |
| Catalog Access Policies | <ul><li>View (<code>idp\_catalogaccesspolicy\_view</code>)</li><li>Create (<code>idp\_catalogaccesspolicy\_create</code>)</li><li>Edit (<code>idp\_catalogaccesspolicy\_edit</code>)</li><li>Delete (<code>idp\_catalogaccesspolicy\_delete</code>)</li></ul>                                              | Active |
| Environment Blueprint   | <ul><li>View (<code>idp\_environmentblueprint\_view</code>)</li><li>Create (<code>idp\_environmentblueprint\_create</code>)</li><li>Edit (<code>idp\_environmentblueprint\_edit</code>)</li><li>Delete (<code>idp\_environmentblueprint\_delete</code>)</li></ul>                                          | Active |
| IDP Environment         | <ul><li>View (<code>idp\_idpenvironment\_view</code>)</li><li>Create (<code>idp\_idpenvironment\_create</code>)</li><li>Edit (<code>idp\_idpenvironment\_edit</code>)</li><li>Delete (<code>idp\_idpenvironment\_delete</code>)</li></ul>                                                                  | Active |
| IDP Module              | <ul><li>Access (<code>idp\_module\_access</code>)</li></ul>                                                                                                                                                                                                                                                | Active |
| IDP Team                | <ul><li>View (<code>idp\_team\_view</code>)</li><li>Create / Edit (<code>idp\_team\_edit</code>)</li><li>Delete (<code>idp\_team\_delete</code>)</li></ul>                                                                                                                                                 | Active |
| Integrations            | <ul><li>View (<code>idp\_integration\_view</code>)</li><li>Create (<code>idp\_integration\_create</code>)</li><li>Edit (<code>idp\_integration\_edit</code>)</li><li>Delete (<code>idp\_integration\_delete</code>)</li></ul>                                                                              | Active |
| Layouts                 | <ul><li>View (<code>idp\_layout\_view</code>)</li><li>Create / Edit (<code>idp\_layout\_edit</code>)</li></ul>                                                                                                                                                                                             | Active |
| Plugins                 | <ul><li>View (<code>idp\_plugin\_view</code>)</li><li>Create / Edit (<code>idp\_plugin\_edit</code>)</li><li>Toggle (<code>idp\_plugin\_toggle</code>)</li><li>Delete (<code>idp\_plugin\_delete</code>)</li></ul>                                                                                         | Active |
| Scorecards              | <ul><li>View (<code>idp\_scorecard\_view</code>)</li><li>Create / Edit (<code>idp\_scorecard\_edit</code>)</li><li>Delete (<code>idp\_scorecard\_delete</code>)</li></ul>                                                                                                                                  | Active |
| Workflow                | <ul><li>View (<code>idp\_workflow\_view</code>)</li><li>Create / Edit (<code>idp\_workflow\_edit</code>)</li><li>Delete (<code>idp\_workflow\_delete</code>)</li><li>Execute (<code>idp\_workflow\_execute</code>)</li></ul>                                                                               | Active |

#### Continuous Error Tracking <a href="#continuous-error-tracking" id="continuous-error-tracking"></a>

| Resource        | Permissions                                                                                                                                                                             | Status |
| --------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Agents          | <ul><li>View (<code>cet\_agents\_view</code>)</li></ul>                                                                                                                                 | Active |
| Critical Events | <ul><li>View (<code>cet\_criticalevent\_view</code>)</li><li>Create / Edit (<code>cet\_criticalevent\_create</code>)</li><li>Delete (<code>cet\_criticalevent\_delete</code>)</li></ul> | Active |
| Tokens          | <ul><li>View (<code>cet\_token\_view</code>)</li><li>Create / Edit (<code>cet\_token\_create</code>)</li><li>Revoke (<code>cet\_token\_revoke</code>)</li></ul>                         | Active |

#### Database DevOps <a href="#database-devops" id="database-devops"></a>

| Resource  | Permissions                                                                                                                                                                  | Status |
| --------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Instances | <ul><li>View (<code>dbops\_instance\_view</code>)</li><li>Create / Edit (<code>dbops\_instance\_edit</code>)</li><li>Delete (<code>dbops\_instance\_delete</code>)</li></ul> | Active |
| Schemas   | <ul><li>View (<code>dbops\_schema\_view</code>)</li><li>Create / Edit (<code>dbops\_schema\_edit</code>)</li><li>Delete (<code>dbops\_schema\_delete</code>)</li></ul>       | Active |

#### Artifact Management <a href="#artifact-management" id="artifact-management"></a>

| Resource            | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Status |
| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| Artifact Registry   | <ul><li>View Registry (<code>artifact\_artregistry\_view</code>)</li><li>Edit Registry (<code>artifact\_artregistry\_edit</code>)</li><li>Delete Registry (<code>artifact\_artregistry\_delete</code>)</li><li>Upload (<code>artifact\_artregistry\_uploadartifact</code>)</li><li>Download (<code>artifact\_artregistry\_downloadartifact</code>)</li><li>Delete Artifact (<code>artifact\_artregistry\_deleteartifact</code>)</li><li>Quarantine Artifact (<code>artifact\_artregistry\_quarantineartifact</code>)</li></ul> | Active |
| Firewall Exceptions | <ul><li>Approve (<code>artifact\_firewallexceptions\_approve</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                 | Active |

#### AI <a href="#ai" id="ai"></a>

| Resource        | Permissions                                                                                                                                                                                                                                                                       | Status |
| --------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| AI LLM Gateway  | <ul><li>Access (<code>ai\_llmgateway\_access</code>)</li></ul>                                                                                                                                                                                                                    | Active |
| AI Rules        | <ul><li>Create (<code>ai\_rules\_create</code>)</li><li>Edit (<code>ai\_rules\_edit</code>)</li><li>Delete (<code>ai\_rules\_delete</code>)</li><li>View (<code>ai\_rules\_view</code>)</li></ul>                                                                                 | Active |
| AI Worker Agent | <ul><li>View (<code>ai\_workeragent\_view</code>)</li><li>Create (<code>ai\_workeragent\_create</code>)</li><li>Edit (<code>ai\_workeragent\_edit</code>)</li><li>Delete (<code>ai\_workeragent\_delete</code>)</li><li>Execute (<code>ai\_workeragent\_execute</code>)</li></ul> | Active |

#### AI DLC Insights <a href="#ai-dlc-insights" id="ai-dlc-insights"></a>

| Resource                    | Permissions                                                                                                                                                                                                                               | Status |
| --------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| AIDI Collections            | <ul><li>Create (<code>sei\_seicollections\_create</code>)</li><li>View (<code>sei\_seicollections\_view</code>)</li><li>Edit (<code>sei\_seicollections\_edit</code>)</li><li>Delete (<code>sei\_seicollections\_delete</code>)</li></ul> | Active |
| AIDI Configuration Settings | Available at the account [scope](/harness-platform/use-harness-platform/platform-access-control.md#permissions-hierarchy-scopes) only.                                                                                                    |        |

* Create (\`sei\_seiconfigurationsettings\_create\`)
* View (\`sei\_seiconfigurationsettings\_view\`)
* Edit (\`sei\_seiconfigurationsettings\_edit\`)
* Delete (\`sei\_seiconfigurationsettings\_delete\`)

\| Active | | AIDI Data Settings | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`sei\_seidatasettings\_view\`)
* Edit (\`sei\_seidatasettings\_edit\`)
* Create (\`sei\_seidatasettings\_create\`)
* Delete (\`sei\_seidatasettings\_delete\`)

\| Active | | AIDI Insight Categories |

* View (\`sei\_seiinsightscategory\_view\`)

\| Active | | AIDI Insights |

* Create (\`sei\_seiinsights\_create\`)
* View (\`sei\_seiinsights\_view\`)
* Edit (\`sei\_seiinsights\_edit\`)
* Delete (\`sei\_seiinsights\_delete\`)

\| Active | | AIDI Profiles | Available at the account \[scope]\(../platform-access-control.md#permissions-hierarchy-scopes) only.

* View (\`sei\_seiprofiles\_view\`)
* Edit (\`sei\_seiprofiles\_edit\`)
* Create (\`sei\_seiprofiles\_create\`)
* Delete (\`sei\_seiprofiles\_delete\`)

\| Active | | AIDI Studio |

* View (\`sei\_seicanvas\_view\`)
* Create / Edit (\`sei\_seicanvas\_edit\`)
* Create (\`sei\_seicanvas\_create\`)
* Delete (\`sei\_seicanvas\_delete\`)

\| Active | | AIDI Teams |

* View (\`sei\_seiteams\_view\`)
* Edit (\`sei\_seiteams\_edit\`)
* Create (\`sei\_seiteams\_create\`)
* Delete (\`sei\_seiteams\_delete\`)

\| Active |

#### Feature Management and Experimentation <a href="#feature-management-and-experimentation" id="feature-management-and-experimentation"></a>

| Resource         | Permissions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            | Status |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------ |
| FME Environment  | <ul><li>View (<code>fme\_fmeenvironment\_view</code>)</li><li>Edit (<code>fme\_fmeenvironment\_edit</code>)</li><li>Data Export View (<code>fme\_fmeenvironment\_dataExportView</code>)</li><li>Data Export Edit (<code>fme\_fmeenvironment\_dataExportEdit</code>)</li><li>SDK API Key View (<code>fme\_fmeenvironment\_sdkApiKeyView</code>)</li><li>SDK API Key Edit (<code>fme\_fmeenvironment\_sdkApiKeyEdit</code>)</li></ul>                                                                                                                                                                                                                    | Active |
| FME Experiment   | <ul><li>View (<code>fme\_fmeexperiment\_view</code>)</li><li>Edit (<code>fme\_fmeexperiment\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | Active |
| FME Feature Flag | <ul><li>Archive (<code>fme\_fmefeatureflag\_archive</code>)</li><li>Unarchive (<code>fme\_fmefeatureflag\_unarchive</code>)</li><li>View (<code>fme\_fmefeatureflag\_view</code>)</li><li>Edit (<code>fme\_fmefeatureflag\_edit</code>)</li><li>Create (<code>fme\_fmefeatureflag\_create</code>), Experimental</li><li>Edit Flag (<code>fme\_fmefeatureflag\_editFlag</code>), Experimental</li><li>Edit Targeting (<code>fme\_fmefeatureflag\_editTargeting</code>), Experimental</li><li>Kill Switch (<code>fme\_fmefeatureflag\_killSwitch</code>), Experimental</li><li>Delete (<code>fme\_fmefeatureflag\_delete</code>), Experimental</li></ul> | Active |
| FME Metric       | <ul><li>View (<code>fme\_fmemetric\_view</code>)</li><li>Edit (<code>fme\_fmemetric\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            | Active |
| FME Segment      | <ul><li>View (<code>fme\_fmesegment\_view</code>)</li><li>Edit (<code>fme\_fmesegment\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | Active |
| FME Traffic Type | <ul><li>View (<code>fme\_fmetraffictype\_view</code>)</li><li>Edit (<code>fme\_fmetraffictype\_edit</code>)</li></ul>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | Active |

#### Load Testing <a href="#load-testing" id="load-testing"></a>

| Resource  | Permissions                                                                                                                                                               | Status |
| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Load Test | <ul><li>View (<code>load\_loadtest\_view</code>)</li><li>Create / Edit (<code>load\_loadtest\_edit</code>)</li><li>Delete (<code>load\_loadtest\_delete</code>)</li></ul> | Active |