> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/prezero/users/permissions.md).

# User permissions

The following tables provide information on the rights and privileges granted to Qwiet users based on their assigned roles. The first major section covers organization-related roles, while the second covers team-related roles.

For more information about organization-related vs. team-related roles, see [RBAC](/sast-and-sca/prezero/users/rbac.md).

## Organization roles <a href="#organization-roles" id="organization-roles"></a>

### Administrative control and subscriptions <a href="#administrative-control-and-subscriptions" id="administrative-control-and-subscriptions"></a>

|                              |       |             |            |        |       |
| ---------------------------- | ----- | ----------- | ---------- | ------ | ----- |
|                              | Owner | Super admin | Power user | Member | Guest |
| Change org owner             | ✅     |             |            |        |       |
| Assign super admin role      | ✅     |             |            |        |       |
| Delete an org                | ✅     |             |            |        |       |
| Claim and use Ocular license | ✅     | ✅           | ✅          | ✅      | ✅     |
| Manage Ocular licenses       | ✅     | ✅           |            |        |       |
| Upgrade Qwiet subscription   | ✅     | ✅           |            |        |       |

### Organization management <a href="#organization-management" id="organization-management"></a>

|                                      |       |             |            |        |       |
| ------------------------------------ | ----- | ----------- | ---------- | ------ | ----- |
|                                      | Owner | Super admin | Power user | Member | Guest |
| Get basic info about the org         | ✅     | ✅           | ✅          | ✅      | ✅     |
| Update org info                      | ✅     | ✅           |            |        |       |
| Get org configuration                | ✅     | ✅           |            |        |       |
| Update org configuration             | ✅     | ✅           |            |        |       |
| Manage SAML config                   | ✅     | ✅           |            |        |       |
| Get list of org's integration tokens | ✅     | ✅           |            |        |       |
| Create an integration token          | ✅     | ✅           |            |        |       |
| Delete integration tokens            | ✅     | ✅           |            |        |       |

### Team and user management <a href="#team-and-user-management" id="team-and-user-management"></a>

|                                                                       |       |             |            |        |       |
| --------------------------------------------------------------------- | ----- | ----------- | ---------- | ------ | ----- |
|                                                                       | Owner | Super Admin | Power User | Member | Guest |
| List org users                                                        | ✅     | ✅           | ✅          | ✅      |       |
| List teams in the org                                                 | ✅     | ✅           | ✅          |        |       |
| Get info about teams                                                  | ✅     | ✅           | ✅          |        |       |
| Create invite to add users to the org                                 | ✅     | ✅           |            |        |       |
| See pending invites                                                   | ✅     | ✅           |            |        |       |
| Delete pending invites                                                | ✅     | ✅           |            |        |       |
| Update teams (modify which users and apps are affiliated with a team) | ✅     | ✅           |            |        |       |
| Update users' roles                                                   | ✅     | ✅           |            |        |       |
| Delete a team (does *not* delete the users or apps)                   | ✅     | ✅           |            |        |       |
| Delete users                                                          | ✅     | ✅           |            |        |       |

### App management <a href="#app-management" id="app-management"></a>

|                                                         |       |             |            |        |       |
| ------------------------------------------------------- | ----- | ----------- | ---------- | ------ | ----- |
|                                                         | Owner | Super admin | Power user | Member | Guest |
| List org apps                                           | ✅     | ✅           | ✅          | ✅      | ✅     |
| Create (add) a new app via the Qwiet CLI                | ✅     | ✅           | ✅          |        |       |
| Add an app via GitHub integration                       | ✅     | ✅           | ✅          |        |       |
| Delete an app                                           | ✅     | ✅           | ✅          |        |       |
| Update app configuration (e.g., VCS settings, policies) | ✅     | ✅           | ✅          |        |       |
| Update custom policies                                  | ✅     | ✅           |            |        |       |

### Viewing scans and findings information <a href="#viewing-scans-and-findings-information" id="viewing-scans-and-findings-information"></a>

|                                 |       |             |            |        |       |
| ------------------------------- | ----- | ----------- | ---------- | ------ | ----- |
|                                 | Owner | Super admin | Power user | Member | Guest |
| Read/write comments on findings | ✅     | ✅           | ✅          | ✅      | ✅     |
| Read results from analysis      | ✅     | ✅           | ✅          | ✅      | ✅     |
| Update findings metadata        | ✅     | ✅           | ✅          | ✅      |       |
| Submit an app for analysis      | ✅     | ✅           | ✅          |        |       |
| Create AutoFix Pull Request     | ✅     | ✅           | ✅          |        |       |

## Team roles <a href="#team-roles" id="team-roles"></a>

### Team and user management <a href="#team-and-user-management-1" id="team-and-user-management-1"></a>

|                                   |            |                |              |             |            |
| --------------------------------- | ---------- | -------------- | ------------ | ----------- | ---------- |
|                                   | Team admin | Team developer | Team manager | Team member | Team guest |
| List users that belong to the org | ✅          | ✅              | ✅            | ✅           |            |
| List own teams                    | ✅          |                | ✅            |             |            |
| Get info about own teams          | ✅          |                | ✅            |             |            |
| Update team members               | ✅          |                | ✅            |             |            |

### App management <a href="#app-management-1" id="app-management-1"></a>

|                                                         |            |                |              |             |            |
| ------------------------------------------------------- | ---------- | -------------- | ------------ | ----------- | ---------- |
|                                                         | Team admin | Team developer | Team manager | Team member | Team guest |
| Add an app                                              | ✅          |                | ✅            |             |            |
| Delete an app                                           | ✅          |                |              |             |            |
| Update app configuration (e.g., VCS settings, policies) | ✅          |                | ✅            |             |            |
| List org apps                                           |            |                |              |             |            |
| Create (add) a new app via the Qwiet CLI                |            |                |              |             |            |
| Add an app via GitHub integration                       |            |                |              |             |            |

### Viewing scans and findings information <a href="#viewing-scans-and-findings-information-1" id="viewing-scans-and-findings-information-1"></a>

|                                 |            |                |              |             |            |
| ------------------------------- | ---------- | -------------- | ------------ | ----------- | ---------- |
|                                 | Team admin | Team developer | Team manager | Team member | Team guest |
| Read results from analysis      | ✅          | ✅              | ✅            | ✅           | ✅          |
| Read/write comments on findings | ✅          | ✅              | ✅            | ✅           | ✅          |
| Update findings metadata        | ✅          | ✅              | ✅            | ✅           |            |
| Submit an app for analysis      | ✅          | ✅              | ✅            |             |            |
| Create AutoFix Pull Request     | ✅          | ✅              | ✅            |             |            |