Configuring CodeArts Deploy Permissions

Adding and Assigning a Role to a Member

The permissions of CodeArts Deploy can be divided into multiple levels. User actions can be managed at different granularities. A new member must be assigned a specified role to use CodeArts Deploy.

Add members and assign roles to them. For details, see Adding Project Members.
Configure permissions for different roles to use CodeArts Deploy.

Configuring Permissions for Each Level

CodeArts Deploy permissions are organized into four levels: project, application, host cluster, and environment. Below is a guide to configuring permissions at each level.

Go to the CodeArts homepage.
1. Log in to the CodeArts console, click , and select a region where you have enabled CodeArts.
2. Click Go to Workspace.
  If your account uses the old billing mode (see Old Billing Modes), click Access Service.
Click the target project name to go to the project.
Choose Settings > Permissions. On the displayed Permissions page, modify the default permissions of system roles or add project-level permissions for the user as prompted.

Project administrators (project creators) and project managers can customize roles and edit the permissions of custom roles.

**Table 1** Default project-level permissions
Role/Operation	View	Create	Edit	Delete	Deploy	Clone	Disable	Create Environment	Assign Permissions	Manage Groups	Create Resource
Project manager	√	√	√	√	√	√	√	√	√	√	√
Project admin	√	√	√	√	√	√	√	√	√	√	×
Product manager	√	×	×	×	×	×	×	×	×	×	×
Test manager	√	×	×	×	×	×	×	×	×	×	×
Operation manager	√	×	×	×	√	×	×	√	×	×	√
System engineer	√	√	√	√	√	√	√	×	×	√	×
Committer	√	√	√	√	√	√	×	×	×	√	×
Developer	√	√	√	√	√	√	×	×	×	√	√
Tester	√	×	×	×	×	×	×	×	×	×	×
Participant	√	×	×	×	×	×	×	×	×	×	×
Viewer	√	×	×	×	×	×	×	×	×	×	×
CI/CD engineer	√	√	√	×	√	√	×	√	×	×	√

**Table 2** CodeArts Deploy 2.0 (experience version) default project-level environment permissions
Role/Operation	View	Create	Edit	Delete	Deploy
Project manager	√	√	√	√	√
Project admin	√	√	√	√	√
Product manager	√	×	×	×	×
Test manager	√	Test and pre-release environments: √ Development and production environments: ×	Test and pre-release environments: √ Development and production environments: ×	Test and pre-release environments: √ Development and production environments: ×	Test and pre-release environments: √ Development and production environments: ×
Operation manager	√	√	√	√	√
System engineer	√	√	√	√	Development, test, and pre-release environments: √ Production environment: ×
Committer	√	√	√	√	×
Developer	√	√	√	√	Development, test, and pre-release environments: √ Production environment: ×
Tester	√	Test environment: √ Development, pre-release, and production environments: ×	Test environment: √ Development, pre-release, and production environments: ×	Test environment: √ Development, pre-release, and production environments: ×	Test environment: √ Development, pre-release, and production environments: ×
Participant	√	Development environment: √ Test, pre-release, and production environments: ×	Development environment: √ Test, pre-release, and production environments: ×	Development environment: √ Test, pre-release, and production environments: ×	Development environment: √ Test, pre-release, and production environments: ×
Viewer	√	×	×	×	×

Go to the CodeArts homepage.
1. Log in to the CodeArts console, click , and select a region where you have enabled CodeArts.
2. Click Go to Workspace.
  If your account uses the old billing mode (see Old Billing Modes), click Access Service.
Click the target project name to go to the project.
Choose CICD > Deploy.
Click the target application name to access the application.
Click Edit. The Deployment Actions page is displayed.
Click Permissions. On the displayed Permissions page, add application-level permissions for the user as prompted.

**Table 3** Default application-level permissions
Role/Operation	View	Edit	Delete	Deploy	Clone	Disable	Create Environment	Assign Permissions
App creator	√	√	√	√	√	√	√	√
Project admin	√	√	√	√	√	√	√	√
Project manager	√	√	√	√	√	√	√	√
Product manager	√	×	×	×	×	×	×	×
Test manager	√	×	×	×	×	×	×	×
Operation manager	√	×	×	√	×	×	√	×
System engineer	√	√	√	√	√	√	×	×
Committer	√	√	√	√	√	×	×	×
Developer	√	√	√	√	√	×	×	×
Tester	√	×	×	×	×	×	×	×
Participant	√	×	×	×	×	×	×	×
Viewer	√	×	×	×	×	×	×	×
CI/CD engineer	√	√	×	√	√	×	√	×

Roles possessing Assign Permissions can modify the permission matrix, but they cannot modify the permissions of Project admin and App creator.
If you do not have the Edit permission, the editing page cannot be displayed.
If you possess Edit but do not possess Assign Permissions, you cannot edit other permissions.
Committer, Project admin, Project manager, Developer, and System engineer have the permission to create applications.
The Operation manager is available only in Türkiye, Santiago, Riyadh, Cairo, and Johannesburg. The Deploy permission of Operation manager is available only in Türkiye and Santiago.

**Table 4** Template permissions
Operation	System Template	Custom Template
View	All users	All users of the same tenant
Create	N/A	All users of the same tenant
Edit	N/A	Template creator and tenant administrator
Delete	N/A	Template creator and tenant administrator

Go to the CodeArts homepage.
1. Log in to the CodeArts console, click , and select a region where you have enabled CodeArts.
2. Click Go to Workspace.
  If your account uses the old billing mode (see Old Billing Modes), click Access Service.
Click the target project name to go to the project.
Choose Settings > General > Basic Resources. The Host Clusters page is displayed.

Choose CICD > Deploy. Click Basic Resources. The Host Clusters page is displayed by default.
Click in the Operation column of a cluster, click Assign Permissions, and configure operation permissions for each role.

**Table 5** Default permissions on a host cluster
Role/Permission	View	Edit	Delete	Add Host	Copy Host	Assign Permissions
Host cluster creator	√	√	√	√	√	√
Project admin	√	√	√	√	√	√
Project manager	√	√	√	√	√	√
Product manager	√	×	×	×	×	×
Test manager	√	×	×	×	√	×
Operation manager	√	×	×	×	√	×
System engineer	√	×	×	×	×	×
Committer	√	×	×	×	×	×
Developer	√	√	√	√	√	×
Tester	√	×	×	×	√	×
Participant	√	×	×	×	√	×
Viewer	√	×	×	×	√	×
CI/CD engineer	√	√	√	√	√	×

Roles with Assign Permissions can modify the permission matrix (including the permission to create host clusters), but they cannot modify permissions of Project admin and Host cluster creator.

Only Project admin, Project manager, Operation manager, and Developer have the permission to create a host cluster in a project by default.

Go to the CodeArts homepage.
1. Log in to the CodeArts console, click , and select a region where you have enabled CodeArts.
2. Click Go to Workspace.
  If your account uses the old billing mode (see Old Billing Modes), click Access Service.
Click the target project name to go to the project.
Choose CICD > Deploy.
Click the target application name to access the application.
Click Edit. The Deployment Actions page is displayed.
Choose Environment Management. The Environment Management page is displayed.
Click in the Operation column of an environment to configure operation permissions for each role.

**Table 6** Environment permissions
Role/Permission	View	Edit	Delete	Deploy	Assign Permissions
Environment creator	√	√	√	√	√
Project admin	√	√	√	√	√
Project manager	√	√	√	√	√
Product manager	√	×	×	×	×
Test manager	√	×	×	×	×
Operation manager	√	√	√	√	√
System engineer	√	√	√	√	×
Committer	√	√	√	√	×
Developer	√	√	√	√	×
Tester	√	×	×	×	×
Participant	√	×	×	×	×
Viewer	√	×	×	×	×
CI/CD engineer	√	√	√	√	×

Roles with Assign Permissions can modify the permission matrix, but they cannot modify permissions of Project creator and Environment creator.

Parent Topic: Purchasing and Authorizing CodeArts Deploy

Previous topic: Authorizing IAM Users to Use CodeArts Deploy

Next topic: Accessing CodeArts Deploy Homepage

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

For any further questions, feel free to contact us through the chatbot.

Chatbot