Permission Management
CodeArts Req uses IAM to centrally manage permissions for multiple projects of a tenant. In a single project, permissions are managed based on specific project settings. There are two types of permissions managed in CodeArts Req: cloud-service-level permissions and project-level permissions.
- Cloud-service-level permissions are configured using IAM. For more information about IAM, see IAM Service Overview.
- Project-level permissions are configured using CodeArts Req.
Cloud Service–Level Permissions
More than one project can be created for an account. By default, only accounts can configure whether to allow IAM users to create projects and can view all projects and members. In some enterprise scenarios, an account can use fine-grained permissions management to grant configuration permissions to some IAM users.
IAM users do not have these permissions by default. To do so, you use the account to add an IAM user to a user group in IAM and assign permissions policies to the user group. This process is called authorization.
CodeArts Req is deployed by physical region and is a project-level service (related to project-based authorization in IAM). Therefore, when assigning permissions, select Region-specific projects for Scope, and then set permissions in the project corresponding to the specified region. The permissions take effect for the project after being set.
NOTE:
If you set permissions for All projects, the permissions will take effect for all region-specific projects.
In IAM, you can grant users permissions by using roles and policies. (For details, see IAM Service Overview.) CodeArts Req uses policy-based authorization to meet the requirements of enterprises for flexible and refined permissions management.
Table 1 describes the system permissions supported by CodeArts Req.
|
Policy Name |
Description |
Policy Type |
Policy Content |
|---|---|---|---|
|
CodeArts Req ConfigOperations |
Operation permissions for a CodeArts Req project |
System-defined policy |
|
Operation |
Fine-grained Authorization Supported |
Description |
|---|---|---|
|
Modify work item templates |
Yes |
Users with this permission can go to > to modify the existing templates. |
|
Delete work item templates |
Yes |
Users with this permission can go to > to delete the existing templates. |
|
View permitted users who can create projects |
Yes |
Users with this permission can go to All Account Settings > to view the users permitted to create projects. |
|
Set IAM user permissions for creating projects |
Yes |
Users with this permission can go to All Account Settings > to set users who have the permissions for creating projects. |
|
View projects under a tenant |
Yes |
Users with this permission can go to All Account Settings > to view all projects. |
|
Join a project under a tenant |
Yes |
Users with this permission can go to All Account Settings > to join any projects. By default, the role of a newly added member is Project manager. |
|
Delete projects |
Yes |
Users with this permission can go to All Account Settings > to delete projects. |
|
View the members of all projects |
Yes |
Users with this permission can go to All Account Settings > to view the members of all projects. |
|
Delete any project member under a tenant |
Yes |
Users with this permission can go to All Account Settings > to delete one or more project members. |
|
Set a new work item creator |
Yes |
Grant this permission to set other users as the work item creators. |
|
Bind an enterprise project |
Yes |
Grant this permission to bind a CodeArts project to an enterprise project when creating or upgrading enterprise projects. |
Project-Level Permissions
You can set permissions for each project you created in CodeArts Req. The permission settings of each project are independent of those of any other projects.
Project management contains three types of roles: project managers (project administrators, project managers, test managers, product managers, and system engineers), developers (committers, developers, testers, and participants), and viewers and O&M managers.
- Project administrators: creators of a project
- Project managers: administrators of development
- Test managers: administrators of testing
- Product managers: requirement analysis managers of a project
- System engineers: architecture analysis managers of a project
- Committers: personnel who participate in project development
- Developers: personnel who participate in project development
- Testers: personnel who participate in project testing
- Participants: personnel who contribute to projects
- Viewers: members who follow or browse projects
- O&M managers: personnel responsible for O&M
|
Module |
Permission |
Project Administrator |
Project Manager |
Product Manager |
System Engineer |
Committer |
Test Manager |
Developer |
Tester |
O&M Manager |
Participant |
Viewer |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Raw requirement (RR) |
View |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
|
Create/Submit/Copy |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
N |
|
|
Edit |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Upload attachment |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Add workload |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete/Restore/Permanently delete |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Cancel/Restart |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Create/Associate/Disassociate child requirement |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Create/Associate/Disassociate work item |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Associate/Disassociate file |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Associate/Disassociate wiki |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Assign |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Suspend/Cancel suspension |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Set status |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Import |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Export |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Feature set |
Inherit |
Y |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
|
Create |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Edit |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete/Restore/Permanently delete |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Import |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Create baseline snapshot |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
View snapshot versions |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
View snapshot comparison |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Create feature tree version snapshot |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
System feature |
View |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
|
Create/Copy |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Edit |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Upload attachment |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Add workload |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete/Restore/Permanently delete |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Set status |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Create/Associate/Disassociate child feature |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Create/Associate/Disassociate child requirement |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Create/Associate/Disassociate work item |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Baseline/Unbaseline |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Import |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Export |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Associate/Disassociate file |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Associate/Disassociate wiki |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
View historical versions |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Suspend/Cancel suspension |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
R&D requirement |
View |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
|
Create/Copy |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Edit |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Upload attachment |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Add workload |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete/Restore/Permanently delete |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Set status |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Create child requirement |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Associate/Disassociate work item |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Baseline/Unbaseline |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Assign/Cancel assignment |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Receive/Reject/Turn back/Transfer |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Associate/Disassociate wiki |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Associate/Disassociate file |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Migrate |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Import |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Export |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Suspend/Cancel suspension |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Task |
View |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
|
Create/Copy |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Edit |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Upload attachment |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Add workload |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete/Restore/Permanently delete |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Set status |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Create child task |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Associate/Disassociate parent task |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Associate/Disassociate work item |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Associate/Disassociate wiki |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Associate/Disassociate document |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Import |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Export |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Bug |
View |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
|
Create/Copy |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Edit |
Y |
Y |
Y |
Y |
Y |
Y |
N |
N |
N |
N |
N |
|
|
Upload attachment |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Add workload |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete/Restore/Permanently delete |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Associate/Disassociate work item |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Associate/Disassociate wiki |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Associate/Disassociate file |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Migrate |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Assign |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Suspend/Cancel suspension |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Set status |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Import |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Export |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Review |
View |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
|
Edit/Cancel |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Delete |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Export |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Plan management |
Create |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Edit |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Baseline/Unbaseline |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Set status |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Import |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Export |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Work settings |
Configure basic settings |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
Manage tag |
Y |
Y |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure work item template |
Y |
Y |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure workflow |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure module |
Y |
Y |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure downstream project |
Y |
Y |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure downstream project of R&D requirement |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure work type |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure review |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure automation |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
N |
N |
|
|
Configure notifications |
Y |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Recycle bin |
Clear recycle bin |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
Document |
Upload document/Create directory |
Y |
N |
Y |
Y |
N |
N |
N |
N |
Y |
N |
N |
|
Edit document property/Rename directory/Move directory |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Delete document/directory |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Download document |
Y |
N |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
|
|
Preview document |
Y |
N |
Y |
Y |
N |
N |
N |
N |
N |
N |
N |
|
Module |
Permission |
Project Administrator |
Project Manager |
Product Manager |
System Engineer |
Committer |
Test Manager |
Developer |
Tester |
O&M Manager |
Participant |
Viewer |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Basic project information |
Archive |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Convert type |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
|
Plan |
Create |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
Edit |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Work item |
Create/Copy |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
Edit |
Y |
Y |
Y |
Y |
N |
Y |
N |
Y |
N |
N |
N |
|
|
Delete |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Import |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Export |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
|
Archive/Unarchive |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Upload file |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Sprint |
Create |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Edit |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Set status |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Chart |
Create chart |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
Y |
Y |
N |
|
Edit chart |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete chart |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Move chart |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Export chart |
Y |
Y |
N |
N |
Y |
Y |
Y |
N |
Y |
Y |
N |
|
|
Create category |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
Y |
Y |
N |
|
|
Rename category |
Y |
Y |
Y |
Y |
Y |
Y |
N |
N |
N |
N |
N |
|
|
Move category |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete category |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Customization |
Custom work item |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Set domain |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Configure notifications |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Configure module |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
|
Configure work type |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Set automation |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Document |
Upload document/Create directory |
Y |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
N |
|
Edit document property/Rename directory/Move directory |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Delete document/directory |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
|
Download document |
Y |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
|
|
Preview document |
Y |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot
