Permission Management
CodeArts Req uses IAM to centrally manage permissions for multiple projects of a tenant. In a single project, permissions are managed based on specific project settings. There are two types of permissions managed in CodeArts Req: cloud-service-level permissions and project-level permissions.
- Cloud-service-level permissions are configured using IAM. For more information about IAM, see IAM Service Overview.
- Project-level permissions are configured using CodeArts Req.
Cloud Service–Level Permissions
More than one project can be created for an account. By default, only accounts can configure whether to allow IAM users to create projects and can view all projects and members. In some enterprise scenarios, an account can use fine-grained permissions management to grant configuration permissions to some IAM users.
IAM users do not have these permissions by default. To do so, you use the account to add an IAM user to a user group in IAM and assign permissions policies to the user group. This process is called authorization.
CodeArts Req is deployed by physical region and is a project-level service (related to project-based authorization in IAM). Therefore, when assigning permissions, select Region-specific projects for Scope, and then set permissions in the project corresponding to the specified region. The permissions take effect for the project after being set.

If you set permissions for All projects, the permissions will take effect for all region-specific projects.
In IAM, you can grant users permissions by using roles and policies. (For details, see IAM Service Overview.) CodeArts Req uses policy-based authorization to meet the requirements of enterprises for flexible and refined permissions management.
Table 1 describes the system permissions supported by CodeArts Req.
Policy Name |
Description |
Policy Type |
Policy Content |
---|---|---|---|
ProjectMan ConfigOperations |
Operation permissions for a CodeArts Req project |
System-defined policy |
Operation |
Fine-grained Authorization Supported |
Description |
---|---|---|
Modify work item templates |
Yes |
Users with this permission can go to > to modify the existing templates. |
Delete work item templates |
Yes |
Users with this permission can go to > to delete the existing templates. |
View permitted users who can create projects |
Yes |
Users with this permission can go to > to view the users permitted to create projects. |
Set IAM user permissions for creating projects |
Yes |
Users with this permission can go to > to set users who have the permissions for creating projects. |
View projects under a tenant |
Yes |
Users with this permission can go to > to view all projects. |
Join a project under a tenant |
Yes |
Users with this permission can go to > to join any projects. By default, a newly added member is granted the Project manager role. |
Delete projects |
Yes |
Users with this permission can go to > to delete projects that they have joined. |
View the members of all projects |
Yes |
Users with this permission can go to > to view the members of all projects. |
Delete any project member under a tenant |
Yes |
Users with this permission can go to All Account Settings > to delete one or more members from a specific project. |
Set a new work item creator |
Yes |
Grant this permission to set other users as the work item creators. |
Bind an enterprise project |
Yes |
Grant this permission to bind a CodeArts project to an enterprise project when creating or upgrading enterprise projects. |
Project-Level Permissions
You can set permissions for each project you created in CodeArts Req. The permission settings of each project are independent of those of any other projects.
Project management contains three types of roles: project managers (project administrators, project managers, test managers, product managers, and system engineers), developers (committers, developers, testers, and participants), and viewers and O&M managers.
- Project administrators: creators of a project
- Project managers: administrators of development
- Test managers: administrators of testing
- Product managers: requirement analysis managers of a project
- System engineers: architecture analysis managers of a project
- Committers: personnel who participate in project development
- Developers: personnel who participate in project development
- Testers: personnel who participate in project testing
- Participants: personnel who contribute to projects
- Viewers: members who follow or browse projects
- O&M managers: personnel responsible for O&M
Module |
Permission |
Project Administrator |
Project Manager |
Product Manager |
System Engineer |
Committer |
Test Manager |
Developer |
Tester |
O&M Manager |
Participant |
Viewer |
---|---|---|---|---|---|---|---|---|---|---|---|---|
Basic project information |
Archive |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
Convert type |
Y |
N |
N |
N |
N |
N |
N |
N |
N |
N |
N |
|
Plan |
Create |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
Edit |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Delete |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Work item |
Create/Copy |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
Edit |
Y |
Y |
Y |
Y |
N |
Y |
N |
Y |
N |
N |
N |
|
Delete |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Import |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
Export |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
|
Archive/Unarchive |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Upload file |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Sprint |
Create |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
Edit |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Delete |
Y |
Y |
Y |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Set status |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Chart |
Create chart |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
Y |
Y |
N |
Edit chart |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Delete chart |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Move chart |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Export chart |
Y |
Y |
N |
N |
Y |
Y |
Y |
N |
Y |
Y |
N |
|
Create category |
Y |
Y |
Y |
Y |
Y |
Y |
Y |
N |
Y |
Y |
N |
|
Rename category |
Y |
Y |
Y |
Y |
Y |
Y |
N |
N |
N |
N |
N |
|
Move category |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Delete category |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Customization |
Custom work item |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
Set domain |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Configure notifications |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Configure module |
Y |
Y |
Y |
Y |
N |
Y |
N |
N |
N |
N |
N |
|
Configure work type |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Set automation |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Document |
Upload document/Create directory |
Y |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
N |
Edit document property/Rename directory/Move directory |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Delete document/directory |
Y |
Y |
N |
N |
N |
Y |
N |
N |
N |
N |
N |
|
Download document |
Y |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
|
Preview document |
Y |
Y |
Y |
Y |
N |
Y |
Y |
Y |
Y |
Y |
Y |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot