Default Permissions

List of default permissions granted to the Organizations, Teams and Users roles.

Tags:

Perms

Categories:

Identity

Customizable Permissions

Default permissions can be easily customized by simply creating your own keychains and roles.

Catalog Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
Share Design	Share design with anyone within your organization, and make your design easily accessible to all relevant team members.	✅	❌	❌	✅	✅
Clone Design	Clone any published design to customise it according to your use cases	✅	❌	❌	✅	✅

Designs Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
View Designs	View all public and published designs of other team members and private of signed-in user	✅	❌	❌	❌	✅
Create new design	Create new Meshery design	❌	✅	❌	✅	✅
Import Design	Import a design	✅	✅	❌	✅	✅
Validate Design	Validate a design	✅	❌	❌	✅	✅
Deploy Design	Deploy a design	✅	❌	❌	✅	✅
Undeploy Design	Retract all resources used in a Meshery design from the cluster	❌	❌	❌	✅	✅
Details of design	Set design information or details of a design	✅	❌	❌	✅	✅
Edit design	Edit a design	✅	❌	❌	✅	✅
Delete a design	Delete a design	❌	❌	❌	✅	✅
Download a design	Download a Meshery design in OCI or YAML format	✅	❌	❌	✅	✅

Filters Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
View Filters	View all public and published filters of other team members and private of signed-in user	✅	❌	❌	❌	✅
Import Filter	Import a filter	✅	❌	❌	✅	✅
Download a WASM filter	Download a WASM filter	✅	❌	❌	✅	✅
Details of WASM Filter	Check information or details of a WASM filter	✅	❌	❌	✅	✅
Edit WASM filter	Edit WASM filter	✅	❌	❌	✅	✅
Clone WASM Filter	Clone WASM filter from catalog, which allows customizing filter and use it in design	✅	❌	❌	✅	✅
Delete WASM Filter	Delete WASM filter permanently from catalog.	❌	❌	❌	✅	✅

Extensions Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
Install extension	Install or enable or disabble extensions in Meshery	❌	❌	❌	✅	✅
View Meshery User Preferences	View all user preferences in Meshery UI	❌	❌	❌	✅	✅
View Extensions	View all extensions on the extension page	❌	❌	❌	✅	✅

Users Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
View All Kubernetes Clusters	View all configured Kubernetes clusters	✅	✅	❌	✅	✅

Connections Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
Add cluster	Add Kubernetes cluster	❌	❌	❌	✅	✅
Change connection state	Change connection state	❌	❌	❌	✅	✅
Flush Meshsync data	Clearing the database by clicking on the `Flush MeshSync`	❌	❌	❌	✅	✅
Register discovered Meshsync resource	Register discovered Meshsync resource to change state to connection	❌	❌	❌	✅	✅
Delete a connection	Delete a connection	❌	❌	❌	✅	✅
View Connections	View all connections within an environment	✅	❌	❌	✅	✅

Settings Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
View Settings	View settings in Meshery	❌	❌	❌	✅	✅
Connect adapter	Configure and connect to Meshery adapters	❌	❌	❌	✅	✅
Connect Metrics	Configure and connect to metrics like Grafana and Promethues	❌	❌	❌	✅	✅
View Metrics	View already configured metrics	❌	❌	❌	✅	✅
View Registry	Explore entities within capabilities registry	❌	❌	❌	✅	✅

Performance Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
Add performance profile	Add a new performance profile	❌	❌	❌	✅	✅
Run test	Run a test on performance profile	❌	❌	❌	✅	✅
View Results	View results of performance tests	✅	❌	❌	✅	✅
Edit performance test	Edit performance test	❌	❌	❌	✅	✅
Delete performance test	Delete performance test	❌	❌	❌	✅	✅
View performance profiles	View all performance profiles	❌	❌	❌	✅	✅

Service mesh lifecycle Permissions

Permission	Description	User	Team Admin	Org Billing Manager	Org Admin	Provider Admin
Manage service mesh life cycle	Manage service mesh life cycle	✅	❌	❌	✅	✅
Manage service mesh configuration	Manage service mesh configuration for applications like EmojiVoto, HTTPBin, Image Hub, Istio Book Info	✅	❌	❌	✅	✅
Apply service mesh configuration	Configure service mesh with some predefined options like Automatic Sidecar injection, Envoy Filter, Policy	✅	❌	❌	✅	✅
Validate service mesh configuration	Validate service mesh configuration against best practices like Analyze Running Configuration, SMI conformance	✅	❌	❌	✅	✅
Apply custom service mesh configuration	Apply custom service mesh configuration	✅	❌	❌	✅	✅
Deploy service mesh	Deploy service mesh	✅	❌	❌	✅	✅
Undeploy service mesh	Undeploy service mesh	✅	❌	❌	✅	✅
View service mesh	View all service meshes in Meshery UI	✅	❌	❌	✅	✅

Last modified March 7, 2024: reference updates (f73025f)