Infrastructure permissions by role and by action

Infrastructure permissions cover adding assets to your organization's infrastructure and managing that infrastructure. A user's role determines who can add assets and who can change infrastructure settings. This article lists the infrastructure permissions for each role and for each action.

Roles referenced on this page: Users with the Admin, Group Admin, Portfolio Manager, Operations, Internal Business User, User, or View Only role.

What can my role do?

Use this section to find everything a specific role can and can't do with infrastructure. For a breakdown by action instead, see By action below.

By action

Permissions key

✅ = Is permitted.

❌ = Not permitted.

➖ = Not applicable and not permitted.

Add assets

✅ Admins and Group Admins can do this.

❌ Portfolio Managers and Users cannot do this.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

Add a connection for 
Cloud Infrastructure Sync

✅ Only Admins can do this.

❌ No other role can add a Cloud Infrastructure Sync connection.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

Create a self-published 
rating

✅ Only Admins can do this.

❌ No other role can create a self-published rating.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

Delete custom 
infrastructure

✅ Only Admins can do this.

❌ No other role can delete custom infrastructure.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

Highlight which 
self-published company 
is the primary rating

✅ Only Admins can do this.

❌ No other role can set the primary self-published company.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

Identify a company 
relationship as company 
managed

✅ Only Admins can do this.

❌ No other role can identify a company relationship as company managed.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

View and set an 
expiration date for 
company-provided assets

✅ Only Admins can do this.

❌ No other role can set an expiration date for company-provided assets.

➖ Not applicable to Internal Business Users, Operations, and View Only.
 

State the parent and subsidiary 
company relationship 
(subsidiary attribution)

✅ Only Admins can do this.

❌ No other role can state the parent and subsidiary company relationship.

➖ Not applicable to Internal Business Users, Operations, and View Only.