The available permissions depend on the user's role. With the exceptions of Master
Admin, Security Admin, and Account Level Audit-Log-Viewers, permissions are limited within the
users' Business Units.
Services and Data
| Role/Permission |
Manage Service (Production) |
Manage Service (Sandbox) |
Delete Service |
Add Service to Business Unit |
Download Data from Service |
Export Data from Service (Production) |
Export Data from Service (Sandbox) |
| Viewer |
|
|
|
|
|
|
|
| Read Only |
|
|
|
|
✔ |
✔ |
✔ |
| Seeder |
|
✔ |
|
✔ |
✔ |
|
✔ |
| Developer |
|
✔ |
|
✔ |
✔ |
|
✔ |
| DevOps |
|
✔ |
✔ |
✔ |
✔ |
|
✔ |
| Admin |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
| Master Admin |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
| Audit-Log-Viewer (Account Level) |
|
|
|
|
|
|
|
| Audit-Log-Viewer (Business Unit Level) |
|
|
|
|
|
|
|
| Security Admin |
|
|
|
|
|
|
|
Account and Audit
| Role/Permission |
View Account and Security Settings |
Manage Account and Security Settings |
View Account Level Audit Logs |
View BU Level Audit Logs |
Submit Data Privacy Requests |
| Viewer |
|
|
|
|
|
| Read Only |
|
|
|
|
|
| Seeder |
|
|
|
|
|
| Developer |
|
|
|
|
|
| DevOps |
|
|
|
|
|
| Admin |
✔ |
|
✔ |
✔ |
✔ |
| Master Admin |
✔ |
✔ |
✔ |
✔ |
✔ |
| Audit-Log-Viewer (Account Level) |
|
|
✔ |
✔ |
|
| Audit-Log-Viewer (Business Unit Level) |
|
|
|
✔ |
|
| Security Admin |
✔ |
✔ |
|
|
|
User and BU Management
| Role/Permission |
Create new user |
Delete/Disable User |
Manage users and their roles |
Replace Master Admin |
Create new Business Unit |
Manage Business Unit |
Add Service to Business Unit |
Move Service between Business Units |
| Viewer |
|
|
|
|
|
|
|
|
| Read Only |
|
|
|
|
|
|
|
|
| Seeder |
|
|
|
|
|
|
|
|
| Developer |
|
|
|
|
|
|
|
|
| DevOps |
|
|
|
|
|
|
|
|
| Admin |
✔ |
|
✔ |
|
|
✔ |
✔ |
✔
* Only if Admin in both BUs
|
| Master Admin |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
| Audit-Log-Viewer (Account Level) |
|
|
|
|
|
|
|
|
| Audit-Log-Viewer (Business Unit Level) |
|
|
|
|
|
|
|
|
| Security Admin |
✔ |
✔ |
✔ |
✔ |
|
|
|
|
Backup & Recover
| Role/Permission |
Abort Backup (Production) |
Run Manual Backup (Production) |
Run Manual Backup (Sandbox) |
Submit Find job |
Submit Compare job |
Preview Restore job |
Submit Restore job |
| Viewer |
|
|
|
✔ |
✔ |
✔ |
|
| Read Only |
|
|
|
✔ |
✔ |
✔ |
|
| Seeder |
|
|
✔ |
|
|
✔ |
|
| Developer |
|
|
✔ |
|
|
✔ |
✔ |
| DevOps |
|
✔ |
✔ |
|
|
✔ |
✔ |
| Admin |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
| Master Admin |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
| Audit-Log-Viewer (Account Level) |
|
|
|
|
|
|
|
| Audit-Log-Viewer (Business Unit Level) |
|
|
|
|
|
|
|
| Security Admin |
|
|
|
|
|
|
|
Accelerate
| Role/Permission |
Seed Sandboxes using no prod data templates |
Seed Sandboxes using templates of services with prod data and no associated
anonymization template |
Manage seeding no prod data templates |
Manage seeding templates of services with prod data and no associated anonymization
template |
View seeding templates' configuration and schema |
View seeds activity, reports, and download log files |
Export seeding template objects hierarchy |
Import seeding template objects hierarchy |
Preview Anonymization templates |
Manage Anonymization templates |
Preview Anonymization jobs |
Submit Anonymization jobs |
| Viewer |
|
|
|
|
✔ |
✔
*Except downloading log files
|
|
|
✔ |
|
✔ |
|
| Read Only |
|
|
|
|
✔ |
✔ |
✔ |
|
✔ |
|
✔ |
|
| Seeder |
✔ |
|
|
|
✔ |
✔ |
✔ |
|
✔ |
|
|
|
| Developer |
✔ |
|
✔ |
|
✔ |
✔ |
✔ |
✔ |
✔ |
|
✔ |
|
| DevOps |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
| Admin |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
| Master Admin |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
| Audit-Log-Viewer (Account Level) |
|
|
|
|
|
|
|
|
|
|
|
|
| Audit-Log-Viewer (Business Unit Level) |
|
|
|
|
|
|
|
|
|
|
|
|
| Security Admin |
|
|
|
|
|
|
|
|
|
|
|
|
Archive
| Role/Permission |
View status and health of Archive Services |
Add, remove and edit services in Business Unit |
Import records from other services in Business Unit |
Archive Key Management |
| Viewer |
✔ |
|
|
|
| Read Only |
✔ |
|
|
|
| Seeder |
|
|
|
|
| Developer |
✔ |
✔ |
✔ |
|
| DevOps |
✔ |
✔ |
✔ |
|
| Admin |
✔ |
✔ |
✔ |
|
| Master Admin |
|
✔ |
✔ |
✔ |
| Audit-Log-Viewer (Account Level) |
|
|
|
|
| Audit-Log-Viewer (Business Unit Level) |
|
|
|
|
| Security Admin |
|
|
|
|
