Help Center/ CodeArts/ User Guide/ Preparations/ Tenant Management/ Managing Tenant Permissions

Updated on 2026-01-12 GMT+08:00

View PDF

Managing Tenant Permissions

Tenant permissions apply to operations beyond CodeArts projects.

**Table 1** Tenant permissions
Category	Description
General	Permissions: Create, edit, and delete custom roles and edit system roles (except Tenant space owner) on the Tenant Permissions page. Members: Add, delete, and edit members on the All Account Settings > General > Members page.
Project Permission Template Management	Permission templates: Create, edit, and delete templates. Project roles: Create, edit, and delete roles.
CodeArts Artifact	Self-hosted repos: Create, edit, and delete repositories; restore, permanently delete, and restore all items in the recycle bin; empty the recycle bin. Self-hosted repo components: Upload, download, view, delete, and overwrite components.
CodeArts Doer	NOTE: CodeArts Doer is coming soon. Knowledge bases: Create, view, edit, and delete knowledge bases. Prompt templates: Create, edit, delete, search, take offline, debug, and evaluate prompt templates, and configure template retrieval. Knowledge assets: Create, view, edit, delete, and initialize knowledge assets. Asset knowledge: Create, view, update, delete, and upload files, and retrieve knowledge. Agents: View and edit agents.

CodeArts provides tenant roles. You can also create custom ones as required.

**Table 2** Tenant roles
Role Name	Description
Owner	The creator of an account by default. This role has CodeArts' all tenant permissions, and its permissions cannot be edited.
Admin	Has CodeArts' all tenant permissions. Owner and Admin can edit this role's permissions.
Member	Has part of CodeArts' tenant permissions. Owner and Admin can edit this role's permissions.
Unauthorized user	Does not have any of CodeArts' tenant permissions. NOTE: This role is not displayed in the role list. New IAM users created in your account are granted this role by default on the General > Members page.

Go to the CodeArts homepage.
1. Log in to the CodeArts console, click , and select a region where you have enabled CodeArts.
2. Click Go to Workspace.
  If your account uses the old billing mode (see Old Billing Modes), click Access Service.
Click the username on the top navigation bar and choose All Account Settings.
Choose General > Tenant Permissions from the navigation pane. The tenant permissions management page is displayed.
In the role list, click the target role name, click Edit, select the required permissions, and click Save.

When a success message shows up, the role permission configuration is complete.

Go to the CodeArts homepage.
1. Log in to the CodeArts console, click , and select a region where you have enabled CodeArts.
2. Click Go to Workspace.
  If your account uses the old billing mode (see Old Billing Modes), click Access Service.
Click the username on the top navigation bar and choose All Account Settings.
Choose General > Tenant Permissions.

Click Create Role. In the displayed dialog box, configure the role information and click OK.

**Table 3** Creating a role
Parameter	Description
Role Name	The name of the custom role. Do not use a system role name. Enter a maximum of 30 characters. Letters, digits, spaces, and the following special characters are supported: () [] - _ ~. & <> {}
Copy Role	Copy permissions from an existing role in a project of the same type. This parameter is optional. Enable it as needed. Once enabled, select a role type (system or custom) and a role name.