Organization Administration Permissions

The Organization permissions allow control for an individual organization.

Table: Fleet management Permissions

Users Description Shorthand/API Name
Change fleet management Change fleet management settings and configurations ChangeFleetManagement
View fleet management View Fleet Management settings and configurations ViewFleetManagement

Table: Permissions and user management Permissions

Users Description Shorthand/API Name
Change all view or repository permissions Change all view or repository permissions ChangeAllViewOrRepositoryPermissions
Change identity providers Change identity provider configuration ChangeIdentityProviders
Change organization permissions Change organization permissions ChangeOrganizationPermissions
Change organization security policies Change organization security policies ChangeOrganizationSecurityPolicies
Change sessions Change session configuration and active sessions ChangeSessions
Manage users Manage users, groups, and roles ManageUsers

Table: Organization settings Permissions

Users Description Shorthand/API Name
Change IP filters Create and update IP filters ChangeIPFilters
Change organization settings Change organization settings ChangeOrganizationSettings
View all internal notifications View all internal notifications ViewAllInternalNotifications

Table: Repository and view management Permissions

Users Description Shorthand/API Name
Create repository Create repositories CreateRepository
Delete all repositories Delete all repositories DeleteAllRepositories
Delete all views Delete all views DeleteAllViews
Ingest across all repositories within organization Ingest across all repositories within organization IngestAcrossAllReposWithinCluster

Table: Other Permissions

Users Description Shorthand/API Name
Change all triggers that run on behalf of users, which users they run on behalf of and all actions Change all triggers that run on behalf of users, which users they run on behalf of and all actions ChangeTriggersToRunAsOtherUsers
Export organization Export organization so that it can be imported to another cluster ExportOrganization
View usage View usage statistics ViewUsage

Table: Query Monitoring Permissions

Users Description Shorthand/API Name
Block queries Allow user to configure query blocking BlockQueries
Monitoring queries Allow user to use the Query Monitor MonitorQueries