Defining permissions
Permissions define the actions users can perform in a specific project. Learn more about each permission type.
Each permission determines the actions that a user can perform in that particular project.
Three types of permissions can be granted for each project:
- Read
- Write
- Execute
Read
The read permission allows users to only view the assigned projects and the project assets.
Example
Tenant Demo has 3 projects. 'Read Only' role gives read access to Project 1 and Project 2 only.
User A with 'Read Only' role sees only Projects 1 and 2; Project 3 is not assigned under the role.
The table of operations user A can and can't do in the 'Read Only' role settings.
| User A Can | User A Can't |
|---|---|
| View only project 1 and Project 2 in the Projects dashboard | Modify project 1 or Project 2 |
| View the Workflows and Flow services that are created under Project 1 and Project 2. | Create, update, delete, or execute any of the Workflows or Flow services in Project 1 and Project 2. |
| View the project APIs (REST and SOAP) and connectors (predefined, REST, SOAP, on-premises, and flat file) created in Project 1 and Project 2. | Create, update, delete, or execute any of the APIs (REST and SOAP) and connectors (predefined, REST, SOAP, on-premises, and flat file) in Project 1 and Project 2. |
Write
When you grant the 'Write' permission for a project, the 'Read' and 'Execute' permissions are granted by default. The 'Write' permission allows users to read, create, update, delete, and execute all assets of the assigned project.
ExampleTenant Demo has 3 projects. 'Read Only' role gives read access to Project 1 and Project 2 only.
User A with 'Read Only' role sees only Projects 1 and 2; Project 3 is not assigned under the role.
The table of operations user A can and can't do in the 'Read Only' role settings.
| User A Can | User A Can't |
|---|---|
| View only project 1 and Project 2 in the Projects dashboard | Modify project 1 or Project 2 |
| View the Workflows and Flow services that are created under Project 1 and Project 2. | Create, update, delete, or execute any of the Workflows or Flow services in Project 1 and Project 2. |
| View the project APIs (REST and SOAP) and connectors (predefined, REST, SOAP, on-premises, and flat file) created in Project 1 and Project 2. | Create, update, delete, or execute any of the APIs (REST and SOAP) and connectors (predefined, REST, SOAP, on-premises, and flat file) in Project 1 and Project 2. |
Execute
The execute permission allows users to only execute the Workflows, Flow services, and APIs available in the assigned project. However, users can't view or modify the assigned project or project assets.
ExampleTenant Demo has 3 projects. 'Read Only' role gives read access to Project 1 and Project 2 only.
User A with 'Read Only' role sees only Projects 1 and 2; Project 3 is not assigned under the role.
The table of operations user A can and can't do in the 'Read Only' role settings.
| User A Can | User A Can't |
|---|---|
| View only project 1 and Project 2 in the Projects dashboard | Modify project 1 or Project 2 |
| View the Workflows and Flow services that are created under Project 1 and Project 2. | Create, update, delete, or execute any of the Workflows or Flow services in Project 1 and Project 2. |
| View the project APIs (REST and SOAP) and connectors (predefined, REST, SOAP, on-premises, and flat file) created in Project 1 and Project 2. | Create, update, delete, or execute any of the APIs (REST and SOAP) and connectors (predefined, REST, SOAP, on-premises, and flat file) in Project 1 and Project 2. |