Default Permissions

List of default permissions granted to the Organizations, Teams and Users roles.

Tags:

Perms

Categories:

Identity

Customizable Permissions

Default permissions can be easily customized by simply creating your own keychains and roles.

Catalog Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
Share Design	Share design with anyone within your organization, and make your design easily accessible to all relevant team members.	✅	✅	✅	✅	❌	X	X	TRUE
Clone Design	Clone any published design to customise it according to your use cases	✅	✅	✅	✅	❌	X	X	TRUE
View Catalog	View all items in catalog	✅	❌	✅	✅	❌	X	X	TRUE

Designs Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
View Designs	View all public and published designs of other team members and private of signed-in user	✅	❌	✅	✅	❌	X	X	TRUE
Create new design	Create new Meshery design	✅	✅	✅	✅	❌	X	X	TRUE
Import Design	Import a design	✅	✅	✅	✅	❌	X	X	TRUE
Validate Design	Validate a design	✅	❌	✅	✅	❌	X	X	TRUE
Deploy Design	Deploy a design	❌	❌	❌	✅	❌	X	X	TRUE
Undeploy Design	Retract all resources used in a Meshery design from the cluster	❌	❌	❌	✅	❌	X	X	TRUE
Details of design	Set design information or details of a design	✅	❌	✅	✅	❌	X	X	TRUE
Edit design	Edit a design	❌	❌	❌	❌	❌	X	X	TRUE
Delete a design	Delete a design	❌	❌	❌	❌	❌	X	X	TRUE
Download a design	Download a Meshery design in OCI or YAML format	✅	❌	✅	✅	❌	X	X	TRUE

Filter Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
View Filters	View all public and published filters of other team members and private of signed-in user	✅	❌	✅	✅	❌	X	X	TRUE

Filters Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
Import Filter	Import a filter	✅	❌	✅	✅	❌	X	X	TRUE
Download a WASM filter	Download a WASM filter	✅	❌	✅	✅	❌	X	X	TRUE
Details of WASM Filter	Check information or details of a WASM filter	✅	❌	✅	✅	❌	X	X	TRUE
Edit WASM filter	Edit WASM filter	❌	❌	❌	❌	❌	X	X	TRUE
Clone WASM Filter	Clone WASM filter from catalog, which allows customizing filter and use it in design	✅	❌	✅	✅	❌	X	X	TRUE
Delete WASM Filter	Delete WASM filter permanently from catalog.	❌	❌	❌	❌	❌	X	X	TRUE

Extensions Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
Install extension	Install or enable or disabble extensions in Meshery	❌	❌	❌	❌	❌	X	X	TRUE
View Meshery User Preferences	View all user preferences in Meshery UI	✅	❌	✅	✅	❌	X	X	TRUE
View Extensions	View all extensions on the extension page	✅	❌	✅	✅	❌	X	X	TRUE

Users Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
View All Kubernetes Clusters	View all configured Kubernetes clusters	✅	✅	✅	✅	❌	X	X	TRUE

Connections Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
Add cluster	Add Kubernetes cluster	❌	❌	❌	❌	❌	X	X	TRUE
Change connection state	Change connection state	❌	❌	❌	❌	❌	X	X	TRUE
Flush Meshsync data	Clearing the database by clicking on the `Flush MeshSync`	❌	❌	❌	❌	❌	X	X	TRUE
Register discovered Meshsync resource	Register discovered Meshsync resource to change state to connection	❌	❌	❌	❌	❌	X	X	TRUE
Delete a connection	Delete a connection	❌	❌	❌	❌	❌	X	X	TRUE
View Connections	View all connections within an environment	✅	❌	✅	✅	❌	X	X	TRUE

Settings Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
View Settings	View settings in Meshery	✅	❌	✅	✅	❌	X	X	TRUE
Connect adapter	Configure and connect to Meshery adapters	❌	❌	❌	❌	❌	X	X	TRUE
Connect Metrics	Configure and connect to metrics like Grafana and Promethues	❌	❌	❌	❌	❌	X	X	TRUE
View Metrics	View already configured metrics	✅	❌	✅	✅	❌	X	X	TRUE
View Registry	Explore entities within capabilities registry	✅	❌	✅	✅	❌	X	X	TRUE
Reset Database	Reset Meshery database	❌	❌	❌	❌	❌	X	X	TRUE

Performance Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
Add performace profile	Add a new performace profile	❌	❌	❌	❌	❌	X	X	TRUE
Run test	Run a test on performance profile	❌	❌	❌	❌	❌	X	X	TRUE
View Results	View results of performance tests	✅	❌	✅	✅	❌	X	X	TRUE
Edit performance test	Edit performance test	❌	❌	❌	❌	❌	X	X	TRUE
Delete performance test	Delete performance test	❌	❌	❌	❌	❌	X	X	TRUE
View performance profiles	View all performance profiles	✅	❌	✅	✅	❌	X	X	TRUE

Service mesh lifecycle Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
Manage service mesh life cycle	Manage service mesh life cycle	❌	❌	❌	❌	❌	X	X	TRUE
Manage service mesh configuration	Manage service mesh configuration for applications like EmojiVoto, HTTPBin, Image Hub, Istio Book Info	❌	❌	❌	❌	❌	X	X	TRUE
Apply service mesh configuration	Configure service mesh with some predefined options like Automatic Sidecar injection, Envoy Filter, Policy	❌	❌	❌	❌	❌	X	X	TRUE
Validate service mesh configuration	Validate service mesh configuration against best practices like Analyze Running Configuration, SMI conformance	❌	❌	❌	❌	❌	X	X	TRUE
Apply custom service mesh configuration	Apply custom service mesh configuration	❌	❌	❌	❌	❌	X	X	TRUE
Deploy service mesh	Deploy service mesh	❌	❌	❌	❌	❌	X	X	TRUE
Undeploy service mesh	Undeploy service mesh	❌	❌	❌	❌	❌	X	X	TRUE
View service mesh	View all service meshes in Meshery UI	✅	❌	✅	✅	❌	X	X	TRUE

Environments Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
View Environment	See all environments within an workspace.	✅	❌	✅	✅	❌	X	X	TRUE
Create Environment	Create a new environment	❌	❌	❌	❌	❌	X	X	TRUE
Delete Environment	Dissolve environment and all connection memberships. Leave associated resources intact.	❌	❌	❌	❌	❌	X	X	TRUE
Edit Environment	Edit environment and it connection membership	❌	❌	❌	❌	❌	X	X	TRUE
Assign connections to environment	Add new connections to environments	❌	❌	❌	❌	❌	X	X	TRUE
Remove connections from environments	Remove connections from environment,	❌	❌	❌	❌	❌	X	X	TRUE

Workspace Permissions

Permission	Description	User	Team Admin	Workspace Manager	Workspace Admin	Org Billing Manager	Org Admin	Inserted	Local Provider
View Workspace	See all workspaces within an organisation	✅	❌	✅	✅	❌	X	X	TRUE
Delete Workspace	Dissolve workspace and all team and environment memberships. Leave associated resources intact	❌	❌	✅	✅	❌	X	X	TRUE
Edit Workspace	Edit workspace and it's team and environment membership	❌	❌	✅	✅	❌	X	X	TRUE
Create Workspace	Create new workspace	❌	❌	✅	✅	❌	X	X	TRUE
Assign environment to workspace	Add new environment to workspace	❌	❌	✅	✅	❌	X	X	TRUE
Remove environment from workspace	Remove environment from workspace	❌	❌	✅	✅	❌	X	X	TRUE

Last modified March 7, 2024: reference updates (f73025f)