Help Center/ CodeArts/ User Guide/ Preparations/ Tenant Management/ Managing Tenant Permissions

Updated on 2026-02-03 GMT+08:00

View PDF

Managing Tenant Permissions

Tenant permissions apply to operations beyond CodeArts projects.

**Table 1** Tenant permissions
Category	Description
General	Member management: Set operation permissions on the All Account Settings > General > Members page, and edit/remove/export members, and set aliases. Organization structure: Set operation permissions on the All Account Settings > General > Organization Structure page, and create/edit/delete departments, add/edit/remove department members, and associate projects. Tenant permission management: Set operation permissions on the All Account Settings > General > Tenant Permissions page, and create/edit/delete custom roles, and edit permission models. Project permission template management: Set operation permissions on the All Account Settings > General > Permission Templates page, create/edit/delete permission templates, and create/edit/delete roles.
CodeArts Artifact	Self-hosted repos: Create, edit, and delete repositories; restore, permanently delete, and restore all items in the recycle bin; empty the recycle bin. Self-hosted repo components: Upload, download, view, delete, import, and overwrite components in the self-hosted repo components.

CodeArts provides tenant roles. You can also create custom ones as required.

**Table 2** Tenant roles
Role Name	Description
Owner	The creator of an account by default. This role has CodeArts' all tenant permissions, and its permissions cannot be edited.
Admin	Has CodeArts' all tenant permissions. Owner and Admin can edit this role's permissions.
Member	Has part of CodeArts' tenant permissions. Owner and Admin can edit this role's permissions.
Unauthorized user	Does not have any of CodeArts' tenant permissions. This role is not displayed in the role list. New IAM users created in your account are granted this role by default if no tenant-level role is configured.

Go to the CodeArts homepage.
1. Log in to the CodeArts console, click , and select a region where you have enabled CodeArts.
2. Click Go to Workspace.
  If your account uses the old billing mode (see Old Billing Modes), click Access Service.
Click the username on the top navigation bar and choose All Account Settings.
Choose General > Tenant Permissions from the navigation pane. The tenant permissions management page is displayed.
In the role list, click the target role name, click Edit, select the required permissions, and click Save.

When a success message shows up, the role permission configuration is complete.

Go to the CodeArts homepage.
1. Log in to the CodeArts console, click , and select a region where you have enabled CodeArts.
2. Click Go to Workspace.
  If your account uses the old billing mode (see Old Billing Modes), click Access Service.
Click the username on the top navigation bar and choose All Account Settings.
Choose General > Tenant Permissions.

Click Create Role. In the displayed dialog box, configure the role information and click OK.

**Table 3** Creating a role
Parameter	Description
Role Name	The name of the custom role. Do not use a system role name. Enter a maximum of 30 characters. Letters, digits, spaces, and the following special characters are supported: () [] - _ ~. & <> {}
Copy Role	Copy permissions from an existing role in a project of the same type. This parameter is optional. Enable it as needed. Once enabled, select a role type (system or custom) and a role name.