SystemPermission is an enumerated list of system permissions.

This enumerated datatype is used by four datatypes: AddRoleInput, which is used by the createRole() mutation field; UpdateRoleInput, which is used by the updateRole() mutation; and CreateSystemPermissionTokenV2Input, which is used by the createSystemPermissionsTokenV2() mutation; and UpdateSystemPermissionsTokenPermissionsInput, which is used by the updateSystemPermissionsTokenPermissions() mutation field. Additionally, this enumerated datatype is used by Role, which is used by several mutation and query fields.

Table: SystemPermission

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For return datatypes, this indicates that you must specify which fields you want returned in the results.
Table last updated: Aug 4, 2025
ChangeBucketStorage   Long-TermAllow the user to change bucket storage.
ChangeFeatureFlags   Long-TermAllow the user to change feature flags.
ChangeSubdomains   Long-TermAllow a change of sub-domains for the account.
ChangeSystemPermissions   Long-TermAllow the user to change system permissions.
ChangeUsername   Long-TermPermit the user to change their user name.
DeleteHumioOwnedRepositoryOrView   Long-TermAllow the user to delete LogScale owned repositories or views from the account. Granting this permission will enable actions that could prevent LogScale from diagnosing and resolving system issues. Only grant this permission if absolutely necessary and you understand the potential impact on system observability.
DeleteOrganizations   Long-TermAllow the user to delete organizations.
ImportOrganization   Long-TermAllow permission to important organization information.
IngestAcrossAllReposWithinCluster   Long-TermAllow ingest across all repositories within clusters.
ListSubdomains   Long-TermAllow the user to get a list of sub-domains.
ManageCluster   Long-TermGive the user permission to manage clusters.
ManageOrganizationLinks   Long-TermAllow managing of organization links.
ManageOrganizations   Long-TermAllow managing of organizations.
PatchGlobal   Long-TermEnable access to the global patch API.
ReadHealthCheck   Long-TermAllow reading of health checks.
ViewOrganizations   Long-TermAllow viewing of list of organizations.