Default Permissions

List of default permissions granted to the Organizations, Teams and Users roles.

Catalog Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
Share DesignShare design with anyone within your organization, and make your design easily accessible to all relevant team members.
Clone DesignClone any published design to customise it according to your use cases
View CatalogView all items in catalog

Designs Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
View DesignsView all public and published designs of other team members and private of signed-in user
Create new designCreate new Meshery design
Import DesignImport a design
Publish DesignPublish a design
Unpublish DesignUnpublish a design
Validate DesignValidate a design
Deploy DesignDeploy a design
Undeploy DesignRetract all resources used in a Meshery design from the cluster
Details of designSet design information or details of a design
Edit designEdit a design✅ *✅ *
Delete a designDelete a design✅ *✅ *
Download a designDownload a Meshery design in OCI or YAML format

Filters Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
View FiltersView all public and published filters of other team members and private of signed-in user
Import FilterImport a filter
Download a WASM filterDownload a WASM filter
Details of WASM FilterCheck information or details of a WASM filter
Edit WASM filterEdit WASM filter✅ *✅ *
Clone WASM FilterClone WASM filter from catalog, which allows customizing filter and use it in design
Delete WASM FilterDelete WASM filter permanently from catalog.✅ *✅ *

Catalog Requests Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
View Catalog RequestsView the catalog publication request queue
Approve Catalog RequestApprove catalog publication requests
Deny Catalog RequestDeny catalog publication requests

Extensions Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
Install extensionInstall or enable or disabble extensions in Meshery
View Meshery User PreferencesView all user preferences in Meshery UI
View ExtensionsView all extensions on the extension page

Users Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
View All Kubernetes ClustersView all configured Kubernetes clusters

Teams Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
View TeamSee only teams to which you are a member. See all other members within those teams.
View TeamsSee all teams of which you are an administrator. See all members of those teams.
View All TeamsSee all teams within an organization. See all members of all teams.
Add User to TeamDirectly create a new user account within a team.
Invite User to TeamSend a request for a user to join a team.
Remove User from TeamDiscontinue user membership of a team and team resources.
Create TeamEstablish new team for organizing groups of users and resource access.
Delete TeamDissolve a team and all user memberships. Leave associated resources intact.
Edit TeamEdit a team and add new members to it.
Remove Roles from Team membersRemove roles from users in a team
Assign Roles to Team membersAssign roles to users in a team
Open Team InviteThis governs the team's invitation permissions, determining whether the team is allowed to extend invitations to new individuals to join through open invite link.

Organizations Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
Create OrganizationEstablish new organization for organizing teams, users, and resource access.
Edit OrganizationEdit organiaztions and add teams to it
Add User to OrganizationDirectly create a new user account within an organization.
Invite User to OrganizationSend a request for a user to join an organization.
Remove User from OrganizationDiscontinue user access to organization, teams and resources; cease billing accrual.
Promote or Demote User to Org AdminElevate or remove organization level administrative privileges.
View OrgSee only organizations to which you are a member. See all other members within your membership teams.
View OrganizationsSee all organizations of which you are an administrator. See all members of those organizations.
View All OrganizationsSee all organizations within a Layer5 Cloud deployment. See all organizations, teams, and users.
Remove Roles from Organization membersRemove roles from users in an organization
Assign Roles to Organization membersAssign roles to users in an organization

Connections Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
Add clusterAdd Kubernetes cluster
Change connection stateChange connection state
Flush Meshsync dataClearing the database by clicking on the `Flush MeshSync`
Register discovered Meshsync resourceRegister discovered Meshsync resource to change state to connection
Delete a connectionDelete a connection
View ConnectionsView all connections within an environment

Settings Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
View SettingsView settings in Meshery
Connect adapterConfigure and connect to Meshery adapters
Connect MetricsConfigure and connect to metrics like Grafana and Promethues
View MetricsView already configured metrics
View RegistryExplore entities within capabilities registry
Reset DatabaseReset Meshery database

Performance Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
Add performace profileAdd a new performace profile
Run testRun a test on performance profile
View ResultsView results of performance tests
Edit performance testEdit performance test
Delete performance testDelete performance test
View performance profilesView all performance profiles

Service mesh lifecycle Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
Manage service mesh life cycleManage service mesh life cycle
Manage service mesh configurationManage service mesh configuration for applications like EmojiVoto, HTTPBin, Image Hub, Istio Book Info
Apply service mesh configurationConfigure service mesh with some predefined options like Automatic Sidecar injection, Envoy Filter, Policy
Validate service mesh configurationValidate service mesh configuration against best practices like Analyze Running Configuration, SMI conformance
Apply custom service mesh configurationApply custom service mesh configuration
Deploy service meshDeploy service mesh
Undeploy service meshUndeploy service mesh
View service meshView all service meshes in Meshery UI

Environments Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
View EnvironmentSee all environments within an workspace.
Create EnvironmentCreate a new environment
Delete EnvironmentDissolve environment and all connection memberships. Leave associated resources intact.
Edit EnvironmentEdit environment and it connection membership
Assign connections to environmentAdd new connections to environments
Remove connections from environmentsRemove connections from environment,

Workspace Permissions

PermissionDescriptionUserTeam AdminWorkspace ManagerWorkspace AdminOrg Billing ManagerOrg AdminProvider Admin
View WorkspaceSee all workspaces within an organisation
Delete WorkspaceDissolve workspace and all team and environment memberships. Leave associated resources intact
Edit WorkspaceEdit workspace and it's team and environment membership
Create WorkspaceCreate new workspace
Assign team to workspaceAdd new team to workspace
Remove team from workspaceRemove team from workspace
Assign environment to workspaceAdd new environment to workspace
Remove environment from workspaceRemove environment from workspace
Assign Designs to WorkspacesAssign designs to workspaces
Remove Designs from WorkspacesRemove designs from workspaces
Last modified July 5, 2024: Make changes in alert (3bf0714)