Managing Permissions

The permissions of CodeArts Deploy are three-layered from top to bottom to manage user behaviors.

Project-Level Permissions

Path for project-level permissions:

Log in to the CodeArts platform.
Click the target project name to access the project.
Choose Settings > General > Service Permissions. The Permission page is displayed.

**Table 1** **Project-level permissions**
Description
Role/Operation	View	Create	Edit	Delete	Deploy	Clone	Disable	Create Environment	Assign Permissions	Manage Groups
Project manager	√	√	√	√	√	√	√	√	√	√
Project administrator	√	√	√	√	√	√	√	√	√	√
Product manager	√	×	×	×	×	×	×	×	×	×
Test manager	√	×	×	×	×	×	×	×	×	×
O&M manager	√	×	×	×	×	×	×	√	×	×
System engineer	√	√	√	√	√	√	√	×	×	√
Committer	√	√	√	√	√	√	×	×	×	√
Developer	√	√	√	√	√	√	×	×	×	√
Tester	√	×	×	×	×	×	×	×	×	×
Participant	√	×	×	×	×	×	×	×	×	×
Viewer	√	×	×	×	×	×	×	×	×	×

Application-Level Permissions

Path for application-level permissions:

Log in to the CodeArts platform.
Click the target project name to access the project.
Choose CICD > Deploy.
Click the target application name to access the application.
Click Edit. The deployment actions page is displayed.
Click Permissions. The application permission management page is displayed.

**Table 2** Default application-level permissions
Description
Role/Operation	View	Edit	Delete	Deploy	Clone	Disable	Create Environment	Assign Permissions
App creator	√	√	√	√	√	√	√	√
Project administrator	√	√	√	√	√	√	√	√
Project manager	√	√	√	√	√	√	√	√
Product manager	√	×	×	×	×	×	×	×
Test manager	√	×	×	×	×	×	×	×
O&M manager	√	×	×	×	×	×	√	×
System engineer	√	√	√	√	√	√	×	×
Committer	√	√	√	√	√	×	×	×
Developer	√	√	√	√	√	×	×	×
Tester	√	×	×	×	×	×	×	×
Participant	√	×	×	×	×	×	×	×
Viewer	√	×	×	×	×	×	×	×

Roles with the Assign Permissions permission can modify the permission matrix, but permissions of the Project manager and App creator roles cannot be modified.
Committer, project_admin, Project manager, Developer , and System engineer have the permission to create applications.
If you do not have the Edit permission, the editing page cannot be displayed.
If you have the Edit permission but do not have Assign Permissions, the Edit, Delete, View, Deploy, and Clone buttons are unavailable.

Resource-Level Permissions

Path for host cluster permissions:

Log in to the CodeArts platform.
Click the target project name to access the project.
Choose Settings > General > Basic Resources. The Host Clusters page is displayed by default.
Click the icon in the operation column of a cluster, click Manage Permissions, and configure operation permissions for each role.

**Table 3** Host cluster permission
Description
Role/Permission	View	Edit	Delete	Add Host	Clone Host	Assign Permissions
Host cluster creator	√	√	√	√	√	√
Project administrator	√	√	√	√	√	√
Project manager	√	√	√	√	√	√
Product manager	√	×	×	×	×	×
Test manager	√	×	×	×	√	×
O&M manager	√	×	×	×	√	×
System engineers	√	×	×	×	×	×
Committer	√	×	×	×	×	×
Developer	√	√	√	√	√	×
Tester	√	×	×	×	√	×
Participant	√	×	×	×	√	×
Viewer	√	×	×	×	√	×

Roles with the Assign Permissions permission can modify the permission matrix, but permissions of the Project creator and App creator roles cannot be modified.

Only the project_admin, Project creator, and Developer have the permission to create host clusters.

Path for environment permissions:

Log in to the CodeArts platform.
Click the target project name to access the project.
Choose CICD > Deploy.
Click the target application name to access the application.
Click Edit. The Deployment Actions page is displayed.
Choose Environment Management. The Environment Management page is displayed.
Click the icon in the operation column of an environment to configure operation permissions for each role.

**Table 4** Environment permissions
Description
Role/Permission	View	Edit	Delete	Deploy	Assign Permissions
Environment creator	√	√	√	√	√
Project administrator	√	√	√	√	√
Project manager	√	√	√	√	√
Product manager	√	×	×	×	×
Test manager	√	×	×	×	×
O&M manager	√	√	√	√	√
System engineers	√	√	√	√	×
Committer	√	√	√	√	×
Developer	√	√	√	√	×
Tester	√	×	×	×	×
Participant	√	×	×	×	×
Viewer	√	×	×	×	×

Roles with the Assign Permissions permission can modify the permission matrix, but permissions of the Project creator and App creator roles cannot be modified.

Previous topic: Managing Parameters