RBAC Permission and Roles
Available roles and permissions in Coalesce
PreviewThis feature is currently available in a private preview and may not be accessible to all customers.
Table Key
- Read(R) - A user can view the data, but not create or update the data.
- Write (W) - A user can create something new or modify existing information. This includes, creating, updating, and deleting.
Organization Level Roles
Role | Permissions Summary | Recommended For |
---|---|---|
Organization Administrator |
| Full administrative control |
Organization Contributor |
| Managers who decide how each person will contribute to a project. |
Organization Member |
| Default Role |
Organization Roles Permissions
Permissions | Org Admin | Org Contributor | Org Member | |
---|---|---|---|---|
Organization Settings | ||||
Users | W | |||
SSO | W | |||
Preferences | W | |||
User Settings | ||||
Git Account | W | W | W | |
Support Information | W | W | W | |
Account Security | W | W | W | |
Project Management | ||||
Create New Project | W | W | ||
Documentation | ||||
Org Level Documentation | R | R | R | |
Project Management | ||||
List Projects | R | |||
Delete Project | W | |||
Configure Git Account | W | |||
Project Settings | ||||
Project Details | W | |||
Git Repository | W | |||
Members | W | |||
Build Settings | ||||
Storage Locations | W | |||
Workspace Settings | W | |||
Create a new Environment | W | |||
Macros | W | |||
Custom Node Types | W | |||
Packages | W | |||
Build Interface Sidebar | ||||
Add Source | W | |||
Nodes | W | |||
Subgraphs | W | |||
Jobs | W | |||
Problem Scanner | W | |||
Git Settings | W | |||
Workspace Setttings | ||||
Workspace | W | |||
User Credentials | W | |||
Storage Mapping | W | |||
Parameters | W | |||
OAuth Settings | W | |||
Duplicate Settings | W | |||
Copy workspace objects | W | |||
Documentation | ||||
Workspace Documentation | R | |||
Deploy Interface | ||||
Generate Access Token | W | W | W | |
Deploy | W | |||
Cancel Run | W | |||
View Run | R | |||
View Run History - Deploy/Refresh | R | |||
Environment Settings | ||||
Settings | W | |||
User Credentials | W | |||
Parameters | W | |||
OAuth Settings | W | |||
Members | W | |||
Documentation | ||||
Environment Level Documentation | R | |||
API/CLI - Environments | ||||
GET All Environments | R | |||
GET a Environment | R | |||
API/CLI - Nodes | ||||
GET a Node | R | |||
GET All Nodes | R | |||
API/CLI - Jobs | ||||
POST Start Job | W | |||
GET Job Status | R | |||
POST Job Refresh | W | |||
POST Cancel Job | W | |||
API/CLI - Runs (and rerun) | ||||
GET a Run | R | |||
GET All Runs | R | |||
GET Run Results | R |
Project Level Roles
Role | Permissions Summary | Recommended For |
---|---|---|
Project Administrator |
| Team manager or senior team member to manage projects. |
Project Architect |
| Senior data architects. |
Project Contributor |
| Junior data architects who don't need full write access to the project. |
Project Member | Project Members can only access a list of projects. This is so they can be given access to an Environment within a project. | Use this to grant Environment permissions. The user will still need to be added to the Environment. |
Project Roles Permissions
- Project roles have no Organization permissions.
Permissions | Project Admin | Project Architect | Project Contributor | Project Member |
---|---|---|---|---|
Organization Settings | ||||
Users | ||||
SSO | ||||
Preferences | ||||
User Settings | ||||
Git Account | ||||
Support Information | ||||
Account Security | ||||
Project Management | ||||
Create New Project | ||||
Documentation | ||||
Org Level Documentation | ||||
Project Management | ||||
List Projects | R | R | R | R |
Delete Project | W | |||
Configure Git Account | W | W | W | |
Project Settings | ||||
Project Details | W | R | R | |
Git Repository | W | R | R | |
Members | W | R | R | |
Build Settings | ||||
Storage Locations | W | W | W | |
Workspace Settings | W | W | W | |
Create a new Environment | W | |||
Macros | W | W | R | |
Custom Node Types | W | W | R | |
Packages | W | W | R | |
Build Interface Sidebar | ||||
Add Source | W | W | W | |
Nodes | W | W | W | |
Subgraphs | W | W | W | |
Jobs | W | W | W | |
Problem Scanner | W | W | W | |
Git Settings | W | W | W | |
Workspace Setttings | ||||
Workspace | W | W | W | |
User Credentials | W | W | W | |
Storage Mapping | W | W | W | |
Parameters | W | W | W | |
OAuth Settings | W | W | W | |
Duplicate Settings | W | W | W | |
Copy workspace objects | W | W | W | |
Documentation | ||||
Workspace Documentation | R | R | R | |
Deploy Interface | ||||
Generate Access Token | W | W | W | |
Deploy | W | |||
Cancel Run | W | |||
View Run | R | |||
View Run History - Deploy/Refresh | R | |||
Environment Settings | ||||
Settings | W | |||
User Credentials | W | |||
Parameters | W | |||
OAuth Settings | W | |||
Members | W | |||
Documentation | ||||
Environment Level Documentation | R | R | R | |
API/CLI - Environments | ||||
GET All Environments | R | |||
GET a Environment | R | |||
API/CLI - Nodes | ||||
GET a Node | R | |||
GET All Nodes | R | |||
API/CLI - Jobs | ||||
POST Start Job | W | |||
GET Job Status | R | |||
POST Job Refresh | W | |||
POST Cancel Job | W | |||
API/CLI - Runs (and rerun) | ||||
GET a Run | R | |||
GET All Runs | R | |||
GET Run Results | R |
Environment Level Roles
Role | Permissions Summary | Recommended For |
---|---|---|
Environment Admin | This role manages environment settings, reads project documentation and deploy either through the API, CLI, or Coalesce App. | Data platform engineer or operations who would approve deployments and schedule jobs. |
Environment Reader |
| Business analyst or data analyst. |
Environment Roles Permissions
- Environment roles have no organization permissions.
- Environment roles have access to view a list of projects only.
Permissions | Environment Admin | Environment Reader |
---|---|---|
Organization Settings | ||
Users | ||
SSO | ||
Preferences | ||
User Settings | ||
Git Account | ||
Support Information | ||
Account Security | ||
Project Management | ||
Create New Project | ||
Documentation | ||
Org Level Documentation | ||
Project Management | ||
List Projects | ||
Delete Project | ||
Configure Git Account | ||
Project Settings | ||
Project Details | ||
Git Repository | ||
Members | ||
Build Settings | ||
Storage Locations | ||
Workspace Settings | ||
Create a new Environment | ||
Macros | ||
Custom Node Types | ||
Packages | ||
Build Interface Sidebar | ||
Add Source | ||
Nodes | ||
Subgraphs | ||
Jobs | ||
Problem Scanner | ||
Git Settings | ||
Workspace Setttings | ||
Workspace | ||
User Credentials | ||
Storage Mapping | ||
Parameters | ||
OAuth Settings | ||
Duplicate Settings | ||
Copy workspace objects | ||
Documentation | ||
Workspace Documentation | ||
Deploy Interface | ||
Generate Access Token | W | W |
Deploy | W | |
Cancel Run | W | |
View Run | R | R |
View Run History - Deploy/Refresh | R | R |
Environment Settings | ||
Settings | W | |
User Credentials | W | |
Parameters | W | R |
OAuth Settings | W | |
Members | W | R |
Documentation | ||
Environment Level Documentation | R | R |
API/CLI - Environments | ||
GET All Environments | R | R |
GET a Environment | R | R |
API/CLI - Nodes | ||
GET a Node | R | R |
GET All Nodes | R | R |
API/CLI - Jobs | ||
POST Start Job | W | |
GET Job Status | R | R |
POST Job Refresh | W | |
POST Cancel Job | W | |
API/CLI - Runs (and rerun) | ||
GET a Run | R | R |
GET All Runs | R | R |
GET Run Results | R | R |
Updated about 2 months ago