Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fuser-guides%2Faaa%2Faccess-control%2Fpermissions%2Fpermissions-list.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fcoralogix.com%2Fdocs%2Fuser-guides%2Faaa%2Faccess-control%2Fpermissions%2Fpermissions-list.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

# Permissions list

The following tables list all available [role-based permissions](https://coralogix.com/docs/docs/user-guides/aaa/access-control/permissions/.md) in Coralogix.

For each permission, you can also see which **system roles** include it by default and which **API presets** it is part of (when applicable).

**Filter by system role:**&#x41;ll roles**Filter by API preset:**&#x41;ll presets

**Search:**&#x53;earch permissions, descriptions, roles, presets…Clear

[Actions](https://coralogix.com/docs/docs/user-guides/data_exploration/custom_actions/.md)

| Resource                    | Description             | System roles                                                                                 | API presets |
| --------------------------- | ----------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `TEAM-ACTIONS:EXECUTE`      | Execute shared actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions     |
| `TEAM-ACTIONS:READCONFIG`   | View shared actions.    | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions     |
| `TEAM-ACTIONS:UPDATECONFIG` | Manage shared actions.  | Data Admin, Observability Lead, Platform Admin, Security User                                | Actions     |
| `USER-ACTIONS:EXECUTE`      | Create user actions.    | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions     |
| `USER-ACTIONS:READCONFIG`   | View private actions.   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions     |
| `USER-ACTIONS:UPDATECONFIG` | Manage private actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions     |

[Administrator](https://coralogix.com/docs/docs/user-guides/account-management/organization-management/create-an-organization/.md)

| Resource                                        | Description                                                                                                                                                 | System roles                                                                                 | API presets |
| ----------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `ACCESS-POLICIES:READALL`                       | View any access policy.                                                                                                                                     | —                                                                                            | —           |
| `ACCESS-POLICIES:UPDATEALL`                     | Manage any access policy.                                                                                                                                   | —                                                                                            | —           |
| `DATA-INGEST-API-KEYS:MANAGE`                   | Create, modify and delete send your data API keys.                                                                                                          | Data Admin, Platform Admin                                                                   | APIKeys     |
| `DATA-INGEST-API-KEYS:READACCESSPOLICY`         | View send-your-data API key access policies.                                                                                                                | —                                                                                            | —           |
| `DATA-INGEST-API-KEYS:READCONFIG`               | View send your data API keys.                                                                                                                               | Data Admin, Observability Lead, Platform Admin                                               | APIKeys     |
| `DATA-INGEST-API-KEYS:UPDATEACCESSPOLICY`       | Create, modify, and delete send-your-data API key access policies.                                                                                          | —                                                                                            | —           |
| `OAUTH-CLIENT:MANAGE`                           | Create, update, and delete OAuth2 clients.                                                                                                                  | Platform Admin                                                                               | —           |
| `OAUTH-CLIENT:READ`                             | View OAuth2 clients.                                                                                                                                        | Platform Admin                                                                               | —           |
| `PERSONAL-API-KEYS-REGISTRY:MANAGE`             | Lifecycle actions across users personal API keys.                                                                                                           | Platform Admin                                                                               | —           |
| `PERSONAL-API-KEYS-REGISTRY:READ`               | List/view personal API keys metadata across users.                                                                                                          | Platform Admin                                                                               | —           |
| `PERSONAL-CUSTOM-API-KEYS:MANAGE`               | Create, modify and delete personal API keys.                                                                                                                | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | APIKeys     |
| `PERSONAL-CUSTOM-API-KEYS:READCONFIG`           | View personal API keys.                                                                                                                                     | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | APIKeys     |
| `SECURE-LOGIN:MANAGE`                           | Configure SSO, MFA/2FA enforcement, and other login-related security policies.                                                                              | Platform Admin                                                                               | —           |
| `SECURE-LOGIN:VIEW`                             | View SSO, MFA/2FA enforcement, and other login-related security policies.                                                                                   | Platform Admin                                                                               | —           |
| `TEAM:MANAGECONNECTIONTOORG`                    | Connect to or disconnect from an organization.                                                                                                              | Platform Admin                                                                               | —           |
| `TEAM-AI-SETTINGS:MANAGE`                       | Allow users to manage the AI team settings and the individual toggle state for each AI feature.                                                             | Platform Admin                                                                               | —           |
| `TEAM-AI-SETTINGS:READCONFIG`                   | Allow users to view the AI team settings and the individual toggle state for each AI feature.                                                               | Data Admin, Observability Lead, Platform Admin                                               | —           |
| `TEAM-API-KEYS-SECURITY-SETTINGS:MANAGE`        | Manage security settings for API keys.                                                                                                                      | Data Admin, Platform Admin                                                                   | —           |
| `TEAM-API-KEYS-SECURITY-SETTINGS:READCONFIG`    | View security settings for API keys.                                                                                                                        | Data Admin, Observability Lead, Platform Admin                                               | —           |
| `TEAM-CUSTOM-API-KEYS:MANAGE`                   | Create, modify and delete team level API keys.                                                                                                              | Platform Admin                                                                               | APIKeys     |
| `TEAM-CUSTOM-API-KEYS:READACCESSPOLICY`         | View team level API key access policies.                                                                                                                    | —                                                                                            | —           |
| `TEAM-CUSTOM-API-KEYS:READCONFIG`               | View team level API keys.                                                                                                                                   | Platform Admin                                                                               | APIKeys     |
| `TEAM-CUSTOM-API-KEYS:UPDATEACCESSPOLICY`       | Update team level API key access policies.                                                                                                                  | —                                                                                            | —           |
| `TEAM-DOMAIN:MANAGE`                            | Create and modify your team's domain.                                                                                                                       | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-DOMAIN:READCONFIG`                        | View your team's domain.                                                                                                                                    | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-GROUPS:MANAGE`                            | Create a group and control user membership and permissions.                                                                                                 | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-GROUPS:READCONFIG`                        | View groups, membership, and permissions.                                                                                                                   | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-IP-ACCESS:MANAGE`                         | Configure and modify your team's IP access.                                                                                                                 | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-IP-ACCESS:READCONFIG`                     | View your team's IP access.                                                                                                                                 | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-LANDING-PAGE:MANAGE`                      | Define the default homepage for a whole team.                                                                                                               | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-LANDING-PAGE:READCONFIG`                  | View the default homepage for a whole team.                                                                                                                 | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-MEMBERS:MANAGE`                           | Control team membership by viewing, adding, and removing members.                                                                                           | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-MEMBERS:READCONFIG`                       | View your team members.                                                                                                                                     | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-QUOTA:MANAGE`                             | Manage team quotas. Move quotas between 2 or more teams for which you have manage permissions.                                                              | Platform Admin                                                                               | —           |
| `TEAM-QUOTA:READ`                               | View your team's quota.                                                                                                                                     | Platform Admin                                                                               | —           |
| `TEAM-ROLES:MANAGE`                             | Create, delete, rename, and edit roles for your teams. To control team membership across all teams, use the Manage Team Membership permission.              | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-ROLES:READCONFIG`                         | View roles for your team.                                                                                                                                   | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-ROLES:READSUMMARY`                        | Read groups summary.                                                                                                                                        | —                                                                                            | —           |
| `TEAM-ROLES:READTEAMMEMBERSSUMMARY`             | Read team members summary.                                                                                                                                  | —                                                                                            | —           |
| `TEAM-SCIM:MANAGE`                              | Configure and modify your team's SCIM.                                                                                                                      | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-SCIM:READCONFIG`                          | View your team's SCIM.                                                                                                                                      | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-SCOPES:MANAGE`                            | Create, delete, rename, and edit scopes for your teams.                                                                                                     | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-SCOPES:READCONFIG`                        | View scopes for your team.                                                                                                                                  | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-SESSIONS:MANAGE`                          | Define the duration of idle sessions for all users in the team. Enabling this option will end all current login sessions and require users to log in again. | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-SESSIONS:READCONFIG`                      | View the duration of idle sessions for all users in the team.                                                                                               | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-SLACK-NOTIFICATIONS:READCONFIG`           | View team notifications on Slack.                                                                                                                           | Data Admin, Observability Lead, Platform Admin                                               | —           |
| `TEAM-SLACK-NOTIFICATIONS:UPDATECONFIG`         | Create and manage team notifications on Slack.                                                                                                              | Data Admin, Observability Lead, Platform Admin                                               | —           |
| `TEAM-SSO:MANAGE`                               | Configure and modify your team's SSO.                                                                                                                       | Platform Admin                                                                               | TeamAdmin   |
| `TEAM-SSO:READCONFIG`                           | View your team's SSO.                                                                                                                                       | Platform Admin                                                                               | TeamAdmin   |
| `USER-AUTH-INFO:READGROUPS`                     | Allows each user to view their group membership.                                                                                                            | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `USER-EMAIL-NOTIFICATIONS:GETDAILYEMAILS`       | Manage the daily auto-generated report that summarizes errors and critical logs in your system.                                                             | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `USER-EMAIL-NOTIFICATIONS:GETDATAUSAGEWARNINGS` | Manage notifications regarding your team quota limit.                                                                                                       | Data Admin, Platform Admin                                                                   | —           |
| `USER-EMAIL-NOTIFICATIONS:GETFLOWANOMALIES`     | Manage flow anomaly notifications.                                                                                                                          | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `USER-EMAIL-NOTIFICATIONS:GETSPIKEANOMALIES`    | Manage spike anomaly notifications.                                                                                                                         | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `USER-SETTINGS:READCONFIG`                      | View the user's personal settings, such as the date format and the timezone.                                                                                | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `USER-SETTINGS:UPDATECONFIG`                    | Edit the user's personal settings, such as the date format and the timezone.                                                                                | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |

[AI](https://coralogix.com/docs/docs/user-guides/ai/.md)

| Resource                   | Description                                                             | System roles                                                                                 | API presets     |
| -------------------------- | ----------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | --------------- |
| `AI-APP-CATALOG:READ`      | View Application Catalog.                                               | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
| `AI-APP-DISCOVERY:MANAGE`  | Activate AI App Discovery and rescan to detect new AI apps.             | Data Admin, Observability Lead, Platform Admin                                               | AiObservability |
| `AI-APP-DISCOVERY:READ`    | View AI App Discovery.                                                  | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
| `AI-APP-EVALUATORS:MANAGE` | Add, edit, and delete evals for an application.                         | Data Admin, Observability Lead, Platform Admin                                               | AiObservability |
| `AI-APP-EVALUATORS:READ`   | View Application Eval Catalog.                                          | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
| `AI-CODE-AGENTS:MANAGE`    | Manage Code agents dashboards                                           | Data Admin, Platform Admin                                                                   | AiObservability |
| `AI-CODE-AGENTS:READ`      | View Code Agents dashboards.                                            | Data Admin, Platform Admin                                                                   | AiObservability |
| `AI-GUARDRAILS:MANAGE`     | Add, edit, and delete AI Guardrails.                                    | Data Admin, Observability Lead, Platform Admin                                               | AiObservability |
| `AI-OVERVIEW:READ`         | View AI Overview.                                                       | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
| `AI-SPM:READ`              | View AI Security Posture Management.                                    | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
| `OLLY:SEND`                | Send messages to Olly and receive responses.                            | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Olly            |
| `OLLY-AUTOMATIONS:MANAGE`  | Manage Olly automatic triggering for cases and other automated flows.   | Data Admin, Observability Lead, Platform Admin                                               | —               |
| `OLLY-TEAM-RULES:MANAGE`   | Add, edit, enable or disable, and delete Olly team rules.               | Data Admin, Observability Lead, Platform Admin                                               | Olly            |
| `OLLY-TEAM-RULES:READ`     | View Olly team rules.                                                   | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Olly            |
| `OLLY-TEAM-SKILLS:MANAGE`  | Add, edit, and delete Olly team Skills.                                 | Data Admin, Observability Lead, Platform Admin                                               | —               |
| `OLLY-TEAM-SKILLS:VIEW`    | View Olly team skills.                                                  | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —               |
| `OLLY-USAGE:MANAGE`        | Manage unit allocation and limit usage for specific users and API keys. | Data Admin, Observability Lead, Platform Admin                                               | —               |

[Alerts](https://coralogix.com/docs/docs/user-guides/alerting/introduction-to-alerts/.md)

| Resource                                | Description                                                      | System roles                                                                                 | API presets |
| --------------------------------------- | ---------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `ALERTS:MANAGE`                         | Allow users to manage Alerts                                     | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `ALERTS:READ`                           | Allow users to view Alerts                                       | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `ALERTS:READACCESSPOLICY`               | Allow users to view defined access policies on their entity      | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `ALERTS:READCONFIG`                     | View Flow alert settings.                                        | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts      |
| `ALERTS:SNOOZE`                         | Snooze or unsnooze an Alert.                                     | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Alerts      |
| `ALERTS:UPDATEACCESSPOLICY`             | Allow users to define access policies on their entity            | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `ALERTS:UPDATECONFIG`                   | Manage Flow alert settings.                                      | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Alerts      |
| `ALERTS-MAP:READ`                       | View visualized alerts in Alerts Map.                            | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts      |
| `ALERTS-SAVED-VIEWS:MANAGE`             | Manage saved views in Alerts.                                    | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | SavedViews  |
| `ALERTS-SAVED-VIEWS:READ`               | View saved views in Alerts.                                      | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | SavedViews  |
| `ALERTS-SAVED-VIEWS:READACCESSPOLICY`   | View access policies for Alerts saved views.                     | Data Admin, Observability Lead, Platform Admin, Security User                                | SavedViews  |
| `ALERTS-SAVED-VIEWS:UPDATEACCESSPOLICY` | Manage access policies for Alerts saved views.                   | Data Admin, Observability Lead, Platform Admin, Security User                                | SavedViews  |
| `ALERTS-TEAM-DEFAULT-VIEWS:MANAGE`      | Define the team-level default view in Alert Management settings. | Platform Admin                                                                               | SavedViews  |
| `ALERTS-TEAM-DEFAULT-VIEWS:READ`        | View the team-level default view in Alert Management settings.   | Platform Admin                                                                               | SavedViews  |
| `LOGS.ALERTS:READCONFIG`                | View log-based alert settings.                                   | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Alerts      |
| `LOGS.ALERTS:UPDATECONFIG`              | Manage log-based alert settings.                                 | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Alerts      |
| `METRICS.ALERTS:READCONFIG`             | View Metric Alert settings.                                      | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Alerts      |
| `METRICS.ALERTS:UPDATECONFIG`           | Define and modify alert settings for Metric Alerts.              | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Alerts      |
| `SLO-MGMT.ALERTS:READCONFIG`            | View SLO-based Alert Settings.                                   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SLO         |
| `SLO-MGMT.ALERTS:UPDATECONFIG`          | Manage SLO-based Alert Settings.                                 | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | SLO         |
| `SPANS.ALERTS:READCONFIG`               | View Trace Alerts settings.                                      | Data Admin, Observability Lead, Platform Admin, Standard User                                | Alerts      |
| `SPANS.ALERTS:UPDATECONFIG`             | Manage Trace Alerts settings.                                    | Data Admin, Observability Lead, Platform Admin, Standard User                                | Alerts      |
| `SUPPRESSION-RULES:READCONFIG`          | Read Suppression-Rules settings.                                 | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts      |
| `SUPPRESSION-RULES:UPDATECONFIG`        | Manage Suppression-Rules settings.                               | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Alerts      |
| `TEAM-ALERTS-SETTINGS:MANAGE`           | Manage state of the toggle settings.                             | Data Admin, Observability Lead, Platform Admin                                               | Alerts      |
| `TEAM-ALERTS-SETTINGS:READCONFIG`       | View the toggle in Settings.                                     | Data Admin, Observability Lead, Platform Admin                                               | Alerts      |

[APM](https://coralogix.com/docs/docs/user-guides/apm/getting-started/apm-onboarding-tutorial/.md)

| Resource                                 | Description                        | System roles                                                                  | API presets |
| ---------------------------------------- | ---------------------------------- | ----------------------------------------------------------------------------- | ----------- |
| `SERVERLESS:READ`                        | View Serverless Monitoring data.   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM         |
| `SERVICE-CATALOG:READ`                   | View Service Catalog data.         | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM         |
| `SERVICE-CATALOG:UPDATE`                 | Manage Service Catalog services.   | Data Admin, Observability Lead, Platform Admin                                | APM         |
| `SERVICE-CATALOG:UPDATEAPDEXCONFIG`      | Manage the Apdex configuration.    | Data Admin, Observability Lead, Platform Admin                                | APM         |
| `SERVICE-CATALOG:UPDATEDIMENSIONSCONFIG` | Manage Service Catalog dimensions. | Data Admin, Observability Lead, Platform Admin                                | APM         |
| `SERVICE-CATALOG:UPDATESLICONFIG`        | Manage Service Catalog SLIs.       | Data Admin, Observability Lead, Platform Admin                                | APM         |
| `SERVICE-MAP:READ`                       | View Service Map.                  | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM         |

[Auditing](https://coralogix.com/docs/docs/user-guides/troubleshooting/coralogix-audit/.md)

| Resource                     | Description                      | System roles               | API presets |
| ---------------------------- | -------------------------------- | -------------------------- | ----------- |
| `TEAM-AUDITING:READCONFIG`   | View team audit settings.        | Data Admin, Platform Admin | Auditing    |
| `TEAM-AUDITING:UPDATECONFIG` | Manage your team audit settings. | Data Admin, Platform Admin | Auditing    |

[Cases](https://coralogix.com/docs/docs/user-guides/notification-center/entity-types/cases/.md)

| Resource                               | Description                                                | System roles                                                                                 | API presets |
| -------------------------------------- | ---------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `CASE-CONFIG:READ`                     | View Suppression window and Snooze period settings.        | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `CASE-CONFIG:UPDATE`                   | Modify Suppression window and Snooze period settings.      | Data Admin, Observability Lead, Platform Admin                                               | —           |
| `CASES:ACKNOWLEDGE`                    | Allow user to acknowledge a case                           | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `CASES:ASSIGN`                         | Allow user to assign a case to themself or to someone else | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `CASES:CLOSE`                          | Allow user to close a case                                 | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `CASES:COMMENT`                        | Allow user to comment on a case                            | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `CASES:CREATE`                         | Allow creating cases                                       | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Cases       |
| `CASES:READ`                           | Allow user to see the list of cases and individual cases   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `CASES:UPDATE`                         | Allow user to update case                                  | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `CASES-SAVED-VIEWS:MANAGE`             | Manage saved views in Cases.                               | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews  |
| `CASES-SAVED-VIEWS:READ`               | View saved views in Cases.                                 | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews  |
| `CASES-SAVED-VIEWS:READACCESSPOLICY`   | View access policies for Cases saved views.                | Data Admin, Observability Lead, Platform Admin, Security User                                | SavedViews  |
| `CASES-SAVED-VIEWS:UPDATEACCESSPOLICY` | Manage access policies for Cases saved views.              | Data Admin, Observability Lead, Platform Admin, Security User                                | SavedViews  |
| `CASES-TEAM-DEFAULT-VIEWS:MANAGE`      | Define the team-level default view in Cases settings.      | Platform Admin                                                                               | SavedViews  |
| `CASES-TEAM-DEFAULT-VIEWS:READ`        | View the team-level default view in Cases settings.        | Platform Admin                                                                               | SavedViews  |

[Coralogix Apps](https://coralogix.com/docs/docs/user-guides/data-query/archive-query/access-cx-data-directly/.md)

| Resource                              | Description                                        | System roles                                                                                 | API presets  |
| ------------------------------------- | -------------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------ |
| `LEGACY-ARCHIVE-QUERIES:EXECUTE`      | Query data from the S3 archive.                    | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
| `LEGACY-ARCHIVE-QUERIES:REINDEX`      | Reindex archive queries.                           | Data Admin, Platform Admin                                                                   | —            |
| `TEAM-SAVED-VIEWS:READ`               | View public shared views in the Explore Screen.    | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews   |
| `TEAM-SAVED-VIEWS:READACCESSPOLICY`   | View access policies for public shared views.      | —                                                                                            | —            |
| `TEAM-SAVED-VIEWS:UPDATE`             | Manage public shared views in the Explore Screen.  | Data Admin, Observability Lead, Platform Admin, Security User                                | SavedViews   |
| `TEAM-SAVED-VIEWS:UPDATEACCESSPOLICY` | Manage access policies for public shared views.    | —                                                                                            | —            |
| `USER-SAVED-VIEWS:READ`               | View private shared views in the Explore Screen.   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews   |
| `USER-SAVED-VIEWS:UPDATE`             | Manage private shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews   |

[Custom Dashboards](https://coralogix.com/docs/docs/user-guides/custom-dashboards/introduction/.md)

| Resource                             | Description                                          | System roles                                                                                 | API presets |
| ------------------------------------ | ---------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `DASHBOARD-FOLDER:MANAGE`            | Create, rename, and delete Custom Dashboard folders. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `DASHBOARD-FOLDER:VIEW`              | View Custom Dashboard folders.                       | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `HOME-DASHBOARD:READTEAMWIDGETS`     | View public Home Dashboard widgets.                  | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `HOME-DASHBOARD:READUSERWIDGETS`     | View private Home Dashboard widgets.                 | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `HOME-DASHBOARD:UPDATETEAMWIDGETS`   | Manage public Home Dashboard widgets.                | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `HOME-DASHBOARD:UPDATEUSERWIDGETS`   | View private Home Dashboard widgets.                 | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `TEAM-DASHBOARDS:READ`               | View public Custom Dashboard.                        | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Dashboards  |
| `TEAM-DASHBOARDS:READACCESSPOLICY`   | View public Custom Dashboard access policies.        | Data Admin, Observability Lead, Platform Admin, Security User                                | —           |
| `TEAM-DASHBOARDS:UPDATE`             | Manage public Custom Dashboard.                      | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Dashboards  |
| `TEAM-DASHBOARDS:UPDATEACCESSPOLICY` | Manage public Custom Dashboard access policies.      | Data Admin, Observability Lead, Platform Admin, Security User                                | —           |

[Data Engine](https://coralogix.com/docs/docs/user-guides/data-layer/overview/.md)

| Resource                             | Description                                                  | System roles                                                                                 | API presets  |
| ------------------------------------ | ------------------------------------------------------------ | -------------------------------------------------------------------------------------------- | ------------ |
| `PIPELINE-ANALYZER:READ`             | Inspect the exact rules applied to each log.                 | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —            |
| `SYSTEM-DATASETS:APPENDDATA`         | Allow users to add new data to datasets.                     | Data Admin, Observability Lead, Platform Admin, Security User                                | —            |
| `SYSTEM-DATASETS:MANAGE`             | Manage system datasets.                                      | Data Admin, Platform Admin                                                                   | —            |
| `SYSTEM-DATASETS:OVERWRITEDATA`      | Allow users to replace existing dataset content.             | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `SYSTEM-DATASETS:READACCESSPOLICY`   | Allow users to read access policy for a specific datasets.   | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `SYSTEM-DATASETS:READCONFIG`         | View system datasets.                                        | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `SYSTEM-DATASETS:READDATA`           | Allow users to read data from datasets.                      | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
| `SYSTEM-DATASETS:UPDATEACCESSPOLICY` | Allow users to update access policy for a specific datasets. | Platform Admin                                                                               | —            |
| `TEAM-DATASET-RULES:MANAGE`          | Create, update, and delete team dataset rules.               | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `TEAM-DATASET-RULES:READCONFIG`      | View team dataset rules.                                     | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `TEAM-DATASETS:APPENDDATA`           | Allow users to add new data to datasets.                     | Data Admin, Observability Lead, Platform Admin, Security User                                | —            |
| `TEAM-DATASETS:CREATE`               | Create a dataset.                                            | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `TEAM-DATASETS:DELETE`               | Delete a dataset.                                            | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `TEAM-DATASETS:OVERWRITEDATA`        | Allow users to replace existing dataset content.             | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `TEAM-DATASETS:READACCESSPOLICY`     | Allow users to read access policy for a specific datasets.   | Data Admin, Platform Admin                                                                   | —            |
| `TEAM-DATASETS:READDATA`             | Allow users to read data from datasets.                      | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
| `TEAM-DATASETS:RENAME`               | Rename a dataset.                                            | Data Admin, Observability Lead, Platform Admin                                               | —            |
| `TEAM-DATASETS:UPDATEACCESSPOLICY`   | Allow users to update access policy for a specific datasets. | Data Admin, Platform Admin                                                                   | —            |

[Data Plans](https://coralogix.com/docs/docs/user-guides/account-management/payment-and-billing/plan-and-payments-management/.md)

| Resource                          | Description                                                        | System roles                                                                                 | API presets |
| --------------------------------- | ------------------------------------------------------------------ | -------------------------------------------------------------------------------------------- | ----------- |
| `DATA-USAGE:MANAGE`               | Enable and disable Data Usage Metrics.                             | Data Admin, Platform Admin                                                                   | DataUsage   |
| `DATA-USAGE:READ`                 | View Data Usage Metrics.                                           | Data Admin, Platform Admin                                                                   | DataUsage   |
| `LOGS.TCO:READPOLICIES`           | View existing log TCO policies.                                    | Data Admin, Observability Lead, Platform Admin, Security User                                | TCOPolicies |
| `LOGS.TCO:UPDATEPOLICIES`         | View and modify existing log TCO policies and create new ones.     | Data Admin, Platform Admin                                                                   | TCOPolicies |
| `METRICS.TCO:READPOLICIES`        | View metrics TCO policies.                                         | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | TCOPolicies |
| `METRICS.TCO:UPDATEPOLICIES`      | Manage metrics TCO policies.                                       | Data Admin, Observability Lead, Platform Admin                                               | TCOPolicies |
| `SPANS.TCO:READPOLICIES`          | View existing tracing TCO policies.                                | Data Admin, Observability Lead, Platform Admin                                               | TCOPolicies |
| `SPANS.TCO:UPDATEPOLICIES`        | View and modify existing tracing TCO policies and create new ones. | Data Admin, Platform Admin                                                                   | TCOPolicies |
| `TEAM-PAY-AS-YOU-GO:READCONFIG`   | View Pay-As-You-Go settings.                                       | Data Admin, Platform Admin                                                                   | Payments    |
| `TEAM-PAY-AS-YOU-GO:UPDATECONFIG` | Manage Pay-As-You-Go settings.                                     | Platform Admin                                                                               | Payments    |
| `TEAM-PAYMENTS:READCONFIG`        | View your team's account and payment method.                       | Data Admin, Platform Admin                                                                   | Payments    |
| `TEAM-PAYMENTS:UPDATECONFIG`      | Manage your team's account and payment method.                     | Platform Admin                                                                               | Payments    |

[Datamap](https://coralogix.com/docs/docs/user-guides/custom-dashboards/widgets/polystat-widget/.md)

| Resource              | Description                  | System roles                                                                                 | API presets |
| --------------------- | ---------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `DATA-MAP:READMAPS`   | View DataMap configurations. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataMap     |
| `DATA-MAP:UPDATEMAPS` | Configure DataMap.           | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | DataMap     |

[Enrichments](https://coralogix.com/docs/docs/user-guides/enrichment_rules/.md)

| Resource                                 | Description                                                      | System roles                                                                                 | API presets |
| ---------------------------------------- | ---------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `CLOUD-METADATA-ENRICHMENT:READCONFIG`   | View AWS Enrichment configuration.                               | Data Admin, Observability Lead, Platform Admin, Security User                                | Enrichments |
| `CLOUD-METADATA-ENRICHMENT:UPDATECONFIG` | Manage AWS Enrichment configuration.                             | Data Admin, Observability Lead, Platform Admin, Security User                                | Enrichments |
| `GEO-ENRICHMENT:READCONFIG`              | View Geo Enrichment configuration.                               | Data Admin, Observability Lead, Platform Admin, Security User                                | Enrichments |
| `GEO-ENRICHMENT:UPDATECONFIG`            | Manage Geo Enrichment configuration.                             | Data Admin, Observability Lead, Platform Admin, Security User                                | Enrichments |
| `SECURITY-ENRICHMENT:READCONFIG`         | View the Unified Threat Intelligence Enrichment configuration.   | Data Admin, Observability Lead, Platform Admin, Security User                                | Enrichments |
| `SECURITY-ENRICHMENT:UPDATECONFIG`       | Manage the Unified Threat Intelligence Enrichment configuration. | Data Admin, Platform Admin, Security User                                                    | Enrichments |
| `TEAM-CUSTOM-ENRICHMENT:READCONFIG`      | View the Custom Enrichment configuration.                        | Data Admin, Observability Lead, Platform Admin, Security User                                | Enrichments |
| `TEAM-CUSTOM-ENRICHMENT:READDATA`        | View the Custom Enrichment data.                                 | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Enrichments |
| `TEAM-CUSTOM-ENRICHMENT:UPDATECONFIG`    | Manage the Custom Enrichment configuration.                      | Data Admin, Observability Lead, Platform Admin, Security User                                | Enrichments |
| `TEAM-CUSTOM-ENRICHMENT:UPDATEDATA`      | Manage data for Custom Enrichment ingestion.                     | Data Admin, Observability Lead, Platform Admin, Security User                                | Enrichments |

[Data Exploration](https://coralogix.com/docs/docs/user-guides/data_exploration/.md)

| Resource                                 | Description                               | System roles                                                                                 | API presets |
| ---------------------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `EXPLORE-SAVED-VIEWS:MANAGE`             | Manage saved views.                       | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `EXPLORE-SAVED-VIEWS:READ`               | View saved views.                         | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `EXPLORE-SAVED-VIEWS:READACCESSPOLICY`   | View the access policy for saved views.   | Data Admin, Observability Lead, Platform Admin, Security User                                | —           |
| `EXPLORE-SAVED-VIEWS:UPDATEACCESSPOLICY` | Manage the access policy for saved views. | Data Admin, Observability Lead, Platform Admin, Security User                                | —           |
| `EXPLORE-TEAM-DEFAULT-VIEWS:MANAGE`      | Manage the team default view in Explore.  | Platform Admin                                                                               | —           |
| `EXPLORE-TEAM-DEFAULT-VIEWS:READ`        | View the team default view in Explore.    | Platform Admin                                                                               | —           |

[Fleet Management](https://coralogix.com/docs/docs/user-guides/fleet-management/overview/.md)

| Resource                      | Description                                   | System roles               | API presets     |
| ----------------------------- | --------------------------------------------- | -------------------------- | --------------- |
| `REMOTE-CONFIGURATION:MANAGE` | Allow admins to manage remote configurations. | Data Admin, Platform Admin | FleetManagement |

[Hosted Apps](https://coralogix.com/docs/docs/user-guides/visualizations/hosted-opensearch-view/.md)

| Resource                       | Description                                       | System roles                                                                                 | API presets          |
| ------------------------------ | ------------------------------------------------- | -------------------------------------------------------------------------------------------- | -------------------- |
| `GRAFANA:READ`                 | View Grafana Dashboards.                          | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Grafana              |
| `GRAFANA:UPDATE`               | Create, modify, and remove Grafana Dashboards.    | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Grafana              |
| `OPENSEARCH-DASHBOARDS:READ`   | View OpenSearch dashboards.                       | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OpenSearchDashboards |
| `OPENSEARCH-DASHBOARDS:UPDATE` | Create, modify, and remove OpenSearch dashboards. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | OpenSearchDashboards |

[Incidents](https://coralogix.com/docs/docs/user-guides/alerting/incidents/.md)

| Resource                | Description                                  | System roles                                                                                 | API presets |
| ----------------------- | -------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `INCIDENTS:ACKNOWLEDGE` | Acknowledge events in triggered alerts.      | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | Incidents   |
| `INCIDENTS:ASSIGN`      | Assign an event in triggered alerts.         | Data Admin, Observability Lead, Platform Admin, Security User                                | Incidents   |
| `INCIDENTS:CLOSE`       | Manually resolve events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User                                | Incidents   |
| `INCIDENTS:READ`        | View events in triggered alerts.             | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Incidents   |
| `INCIDENTS:SNOOZE`      | Snooze events in triggered alerts.           | Data Admin, Observability Lead, Platform Admin, Security User                                | Incidents   |

[Infrastructure Monitoring](https://coralogix.com/docs/docs/user-guides/infrastructure/infrastructure-explorer/overview/.md)

| Resource                                | Description                                                                                              | System roles                                                                                 | API presets |
| --------------------------------------- | -------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `INFRASTRUCTURE-EXPLORER:READ`          | View the Infra Explorer resource catalog.                                                                | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `INFRASTRUCTURE-HEALTH-RULES:MANAGE`    | Create, edit, enable, disable, duplicate, and delete health rules, and manage policies on each resource. | Data Admin, Observability Lead, Platform Admin, Standard User                                | —           |
| `INFRASTRUCTURE-HEALTH-RULES:READ`      | View configured health rules.                                                                            | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `INFRASTRUCTURE-MONITORING-DATA:MANAGE` | Enable or disable Infrastructure Monitoring diagnostic logs.                                             | Data Admin, Observability Lead, Platform Admin, Standard User                                | —           |

[Integrations](https://coralogix.com/docs/docs/integrations/getting-started/.md)

| Resource                       | Description                                                      | System roles                                                  | API presets    |
| ------------------------------ | ---------------------------------------------------------------- | ------------------------------------------------------------- | -------------- |
| `CONTEXTUAL-DATA:READCONFIG`   | View configurations for Native Integrations (Contextual Data).   | Data Admin, Observability Lead, Platform Admin, Security User | ContextualData |
| `CONTEXTUAL-DATA:UPDATECONFIG` | Manage configurations for Native Integrations (Contextual Data). | Data Admin, Platform Admin                                    | ContextualData |
| `EXTENSIONS:DEPLOY`            | Deploy, undeploy, and update extension packages.                 | Data Admin, Platform Admin, Security User                     | Extensions     |
| `EXTENSIONS:READCONFIG`        | View extension packages.                                         | Data Admin, Observability Lead, Platform Admin, Security User | Extensions     |
| `EXTENSIONS:UPDATECONFIG`      | Add, update, or delete extension packages.                       | Data Admin, Platform Admin                                    | Extensions     |
| `INTEGRATIONS:DEPLOY`          | Deploy, undeploy, and update integrations.                       | Data Admin, Platform Admin                                    | Integrations   |
| `INTEGRATIONS:READCONFIG`      | View deployed integration packages.                              | Data Admin, Observability Lead, Platform Admin, Security User | Integrations   |

[Investigations](https://coralogix.com/docs/docs/user-guides/investigations/overview/.md)

| Resource                   | Description                                                                                | System roles                                                                                 | API presets |
| -------------------------- | ------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------- | ----------- |
| `INVESTIGATIONS:READ`      | View investigations to which you've been invited or are public.                            | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |
| `INVESTIGATIONS:READALL`   | View all private and public investigations without invitation.                             | Observability Lead, Platform Admin, Security User                                            | —           |
| `INVESTIGATIONS:UPDATE`    | Create and update investigations to which you've been invited or are public.               | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `INVESTIGATIONS:UPDATEALL` | Create investigations and update all private and public investigations without invitation. | Observability Lead, Platform Admin, Security User                                            | —           |

[LiveTail](https://coralogix.com/docs/docs/user-guides/data_exploration/logs/livetail/.md)

| Resource        | Description         | System roles                                                                                 | API presets |
| --------------- | ------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `LIVETAIL:READ` | View LiveTail data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | LiveTail    |

[Logs](https://coralogix.com/docs/docs/user-guides/data_exploration/logs/quickstart/.md)

| Resource                           | Description                                                               | System roles                                                                                 | API presets   |
| ---------------------------------- | ------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------- |
| `LOGS.DATA-ANALYTICS#HIGH:READ`    | View metadata for frequent-search logs in the form of mapping statistics. | Data Admin, Platform Admin                                                                   | DataAnalytics |
| `LOGS.DATA-API#HIGH:READDATA`      | Query frequent-search logs.                                               | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying  |
| `LOGS.DATA-API#LOW:READDATA`       | Query Monitoring and Compliance logs.                                     | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying  |
| `LOGS.DATA-SETUP#LOW:READCONFIG`   | View archive settings for Monitoring and Compliance logs.                 | Data Admin, Observability Lead, Platform Admin, Security User                                | DataSetup     |
| `LOGS.DATA-SETUP#LOW:UPDATECONFIG` | Manage archive settings for Monitoring and Compliance logs.               | Data Admin, Platform Admin                                                                   | DataSetup     |
| `LOGS.RESERVED-FIELDS:MANAGE`      | Add, edit, or delete the schema's fields.                                 | Data Admin, Observability Lead, Platform Admin                                               | —             |
| `LOGS.RESERVED-FIELDS:READ`        | Only view the fields of the schema.                                       | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —             |
| `SPLIT-INDEX:MANAGE`               | Apply split index on demand to apply reserved field changes.              | Data Admin, Observability Lead, Platform Admin                                               | —             |

[Metrics](https://coralogix.com/docs/docs/user-guides/data_exploration/metric-explorer/.md)

| Resource                              | Description                                 | System roles                                                                                 | API presets   |
| ------------------------------------- | ------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------- |
| `METRICS.DATA-ANALYTICS#HIGH:READ`    | View metrics metadata under Metrics Usage.  | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | DataAnalytics |
| `METRICS.DATA-API#HIGH:READDATA`      | Query metrics.                              | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying  |
| `METRICS.DATA-SETUP#LOW:READCONFIG`   | View archive bucket settings.               | Data Admin, Observability Lead, Platform Admin, Security User                                | DataSetup     |
| `METRICS.DATA-SETUP#LOW:UPDATECONFIG` | Manage archive bucket settings.             | Data Admin, Platform Admin                                                                   | DataSetup     |
| `STREAMING-AGGREGATIONS:READCONFIG`   | View a list of streaming aggregation rules. | Data Admin, Observability Lead, Platform Admin, Read-Only User                               | —             |
| `STREAMING-AGGREGATIONS:UPDATECONFIG` | Add or delete streaming aggregation rules.  | Data Admin, Observability Lead, Platform Admin                                               | —             |

[Notifications](https://coralogix.com/docs/docs/user-guides/alerting/configure-notifications/settings/.md)

| Resource                                      | Description                                                                     | System roles                                                                                 | API presets        |
| --------------------------------------------- | ------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------------ |
| `NOTIFICATION-CENTER-CONNECTORS:READCONFIG`   | View the existing connectors in the notification center and their field data.   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
| `NOTIFICATION-CENTER-CONNECTORS:READSUMMARY`  | View the list of existing connectors in the notification center.                | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
| `NOTIFICATION-CENTER-CONNECTORS:UPDATECONFIG` | Create and edit connectors in the notification center and their field data.     | Data Admin, Observability Lead, Platform Admin                                               | NotificationCenter |
| `NOTIFICATION-CENTER-PRESETS:READCONFIG`      | View the existing presets in the notification center and their field templates. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
| `NOTIFICATION-CENTER-PRESETS:READSUMMARY`     | View the list of existing presets in the notification center.                   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
| `NOTIFICATION-CENTER-PRESETS:UPDATECONFIG`    | Create and edit presets in the notification center and their field templates.   | Data Admin, Observability Lead, Platform Admin                                               | NotificationCenter |
| `NOTIFICATION-CENTER-ROUTERS:READCONFIG`      | View the existing routers in the notification center and their routing rules.   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
| `NOTIFICATION-CENTER-ROUTERS:READSUMMARY`     | View the list of existing routers in the notification center.                   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
| `NOTIFICATION-CENTER-ROUTERS:UPDATECONFIG`    | Create and edit routers in the notification center and their routing rules.     | Data Admin, Observability Lead, Platform Admin                                               | NotificationCenter |
| `NOTIFICATION-CENTER-SETTINGS:READCONFIG`     | View team-level notification center settings.                                   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
| `NOTIFICATION-CENTER-SETTINGS:UPDATECONFIG`   | Modify team-level notification center settings.                                 | Data Admin, Observability Lead, Platform Admin, Security User                                | NotificationCenter |
| `OUTBOUND-WEBHOOKS:READCONFIG`                | View generic outbound webhooks configuration.                                   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OutboundWebhooks   |
| `OUTBOUND-WEBHOOKS:READSUMMARY`               | View all available outbound webhooks names.                                     | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OutboundWebhooks   |
| `OUTBOUND-WEBHOOKS:UPDATECONFIG`              | Create and modify the outbound webhooks configuration.                          | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | OutboundWebhooks   |

[Parsing Rules](https://coralogix.com/docs/docs/user-guides/data-transformation/parsing/log-parsing-rules/.md)

| Resource                     | Description                              | System roles                                                  | API presets  |
| ---------------------------- | ---------------------------------------- | ------------------------------------------------------------- | ------------ |
| `PARSING-RULES:READCONFIG`   | View parsing rules.                      | Data Admin, Observability Lead, Platform Admin, Security User | ParsingRules |
| `PARSING-RULES:UPDATECONFIG` | Create, modify, or remove parsing rules. | Data Admin, Observability Lead, Platform Admin, Security User | ParsingRules |

Product Analytics

| Resource                   | Description                                            | System roles                                                                                 | API presets |
| -------------------------- | ------------------------------------------------------ | -------------------------------------------------------------------------------------------- | ----------- |
| `PRODUCT-ANALYTICS:MANAGE` | Allow the user to manage product analytics information | Data Admin, Observability Lead, Platform Admin, Security User, Standard User                 | —           |
| `PRODUCT-ANALYTICS:READ`   | Allow the user to access product analytics information | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |

[Quota Rules](https://coralogix.com/docs/docs/user-guides/account-management/payment-and-billing/quota-rules/.md)

| Resource                  | Description                                                    | System roles                                   | API presets |
| ------------------------- | -------------------------------------------------------------- | ---------------------------------------------- | ----------- |
| `TEAM-QUOTA-RULES:MANAGE` | Manage team quota rules. Allocate quota units per entity type. | Data Admin, Platform Admin                     | —           |
| `TEAM-QUOTA-RULES:READ`   | View team quota rules. Allocate quota units per entity type.   | Data Admin, Observability Lead, Platform Admin | —           |

[RUM](https://coralogix.com/docs/docs/user-guides/rum/getting-started/real-user-monitoring/.md)

| Resource                             | Description                                         | System roles                                                                                 | API presets   |
| ------------------------------------ | --------------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------- |
| `HIDE-ERRORS:READCONFIG`             | View hidden errors in the UI.                       | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User                | —             |
| `HIDE-ERRORS:UPDATECONFIG`           | Hide specific errors from the UI.                   | Data Admin, Observability Lead, Platform Admin, Standard User                                | —             |
| `RUM:VIEW`                           | View RUM.                                           | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User                | —             |
| `RUM-SAVED-VIEWS:MANAGE`             | Create, edit, and delete RUM saved views.           | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —             |
| `RUM-SAVED-VIEWS:READ`               | View saved views in Real User Monitoring.           | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —             |
| `RUM-SAVED-VIEWS:READACCESSPOLICY`   | View access policies defined on RUM saved views.    | Data Admin, Observability Lead, Platform Admin, Security User                                | —             |
| `RUM-SAVED-VIEWS:UPDATEACCESSPOLICY` | Define access policies on RUM saved views.          | Data Admin, Observability Lead, Platform Admin, Security User                                | —             |
| `RUM-SETTINGS:UPDATECONFIG`          | Manage RUM settings.                                | Data Admin, Observability Lead, Platform Admin, Standard User                                | —             |
| `RUM-TEAM-DEFAULT-VIEWS:MANAGE`      | Define team-level default views in RUM settings.    | Platform Admin                                                                               | —             |
| `RUM-TEAM-DEFAULT-VIEWS:READ`        | View team-level default views in RUM.               | Platform Admin                                                                               | —             |
| `RUM-TEAM-SAVED-FILTER:READ`         | View public saved filters in your RUM dashboard.    | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User                | —             |
| `RUM-TEAM-SAVED-FILTER:UPDATE`       | Manage public saved filters in your RUM dashboard.  | Data Admin, Observability Lead, Platform Admin, Standard User                                | —             |
| `RUM-USER-SAVED-FILTER:READ`         | View private saved filters in your RUM dashboard.   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User                | —             |
| `RUM-USER-SAVED-FILTER:UPDATE`       | Manage private saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Standard User                                | —             |
| `SESSION-RECORDING:READCONFIG`       | Record user sessions.                               | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User                | —             |
| `SOURCE-MAPPING:READMAPPING`         | Read RUM source maps.                               | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User                | SourceMapping |
| `SOURCE-MAPPING:UPLOADMAPPING`       | Upload RUM source maps.                             | Platform Admin                                                                               | SourceMapping |

[Recording Rules](https://coralogix.com/docs/docs/user-guides/data-transformation/metric-rules/recording-rules/.md)

| Resource                               | Description                                                                              | System roles                                                  | API presets    |
| -------------------------------------- | ---------------------------------------------------------------------------------------- | ------------------------------------------------------------- | -------------- |
| `LOGS.EVENTS2METRICS:READCONFIG`       | View Events2Metrics configuration when the source input is logs.                         | Data Admin, Observability Lead, Platform Admin, Security User | Events2Metrics |
| `LOGS.EVENTS2METRICS:UPDATECONFIG`     | Configure or modify the configuration for Events2Metrics, when the source input is logs. | Data Admin, Observability Lead, Platform Admin, Security User | Events2Metrics |
| `METRICS.RECORDING-RULES:READCONFIG`   | View recording rules.                                                                    | Data Admin, Observability Lead, Platform Admin, Security User | RecordingRules |
| `METRICS.RECORDING-RULES:UPDATECONFIG` | Create, modify, or import recording rules.                                               | Data Admin, Observability Lead, Platform Admin, Security User | RecordingRules |
| `SPANS.EVENTS2METRICS:READCONFIG`      | View Events2Metrics configuration when the source input is spans.                        | Data Admin, Observability Lead, Platform Admin                | Events2Metrics |
| `SPANS.EVENTS2METRICS:UPDATECONFIG`    | Configure or modify the configuration for Event2Metrics, when the source input is spans. | Data Admin, Observability Lead, Platform Admin                | Events2Metrics |

[Schema Tracking and Management](https://coralogix.com/docs/docs/user-guides/data-layer/schema-management/schema-explorer/.md)

| Resource                         | Description                                                                                     | System roles                                                                                 | API presets |
| -------------------------------- | ----------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `GLOBAL-MAPPING:READCONFIG`      | View Label Mapping.                                                                             | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User                | —           |
| `GLOBAL-MAPPING:UPDATECONFIG`    | Manage Label Mapping.                                                                           | Data Admin, Observability Lead, Platform Admin                                               | —           |
| `TEAM-SCHEMA-MANAGER:MANAGE`     | Allow users to edit, reserve, or map schema fields as needed.                                   | Data Admin, Observability Lead, Platform Admin                                               | —           |
| `TEAM-SCHEMA-MANAGER:READCONFIG` | Allow users to see field names, types, cardinality, popularity, and other schema-level metrics. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | —           |

[Profiles](https://coralogix.com/docs/docs/user-guides/continuous-profiling/introduction/.md)

| Resource                        | Description              | System roles                                                                                 | API presets   |
| ------------------------------- | ------------------------ | -------------------------------------------------------------------------------------------- | ------------- |
| `PROFILES.CPU-PROFILES:READ`    | View CPU profiling data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying  |
| `PROFILES.DEBUG-SYMBOLS:UPLOAD` | Upload debug symbols.    | Data Admin, Platform Admin                                                                   | SourceMapping |

[SLO Management](https://coralogix.com/docs/docs/user-guides/slos/introduction/.md)

| Resource           | Description          | System roles                                                                                 | API presets |
| ------------------ | -------------------- | -------------------------------------------------------------------------------------------- | ----------- |
| `SLO:READCONFIG`   | View SLO settings.   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SLO         |
| `SLO:UPDATECONFIG` | Manage SLO settings. | Data Admin, Observability Lead, Platform Admin, Security User                                | SLO         |

[Snowbit](https://coralogix.com/docs/docs/user-guides/security/cloud-security-posture-management/gcp-security-posture-management/.md)

| Resource                             | Description                                                            | System roles                                 | API presets |
| ------------------------------------ | ---------------------------------------------------------------------- | -------------------------------------------- | ----------- |
| `CLOUD-SECURITY:DEPLOY`              | Deploy and undeploy Coralogix Cloud Security (STA).                    | Platform Admin, Security User                | Security    |
| `CLOUD-SECURITY:READCONFIG`          | View configuration for, and status of, Coralogix Cloud Security (STA). | Platform Admin, Security User                | Security    |
| `SNOWBIT.ALERTS:CREATESECURITYALERT` | Create an STA Alert.                                                   | Platform Admin, Security User, Standard User | Security    |
| `SNOWBIT.ALERTS:READ`                | View STA Alert settings.                                               | Platform Admin, Security User, Standard User | Security    |
| `SNOWBIT.CSPM:READ`                  | View Cloud Posture Security Management data.                           | Platform Admin, Security User                | Security    |
| `SNOWBIT.OVERVIEW:READ`              | View Snowbit overview data.                                            | Platform Admin, Security User                | Security    |
| `SNOWBIT.RESOURCE-EXPLORER:READ`     | View Snowbit Resource Explorer data.                                   | Platform Admin, Security User                | Security    |
| `SNOWBIT.SETUP:MANAGE`               | View Snowbit SSPM data.                                                | Platform Admin, Security User                | Security    |

[Spans](https://coralogix.com/docs/docs/dataprime/user-guide/foundations/understanding-spans/.md)

| Resource                       | Description                            | System roles                                                                  | API presets  |
| ------------------------------ | -------------------------------------- | ----------------------------------------------------------------------------- | ------------ |
| `SPANS.DATA-API#HIGH:READDATA` | Query frequent-search spans.           | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | DataQuerying |
| `SPANS.DATA-API#LOW:READDATA`  | Query Monitoring and Compliance spans. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | DataQuerying |

[Version Benchmarks](https://coralogix.com/docs/docs/user-guides/monitoring-and-insights/version-benchmarks/.md)

| Resource                                       | Description                                      | System roles                                                                  | API presets     |
| ---------------------------------------------- | ------------------------------------------------ | ----------------------------------------------------------------------------- | --------------- |
| `VERSION-BENCHMARK-TAGS:READ`                  | View Version Benchmark tags.                     | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | CICDIntegration |
| `VERSION-BENCHMARK-TAGS:UPDATE`                | Modify Version Benchmark tags.                   | Data Admin, Observability Lead, Platform Admin, Standard User                 | CICDIntegration |
| `VERSION-BENCHMARKS-REPORTS:READ`              | View Version Benchmark reports.                  | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | CICDIntegration |
| `VERSION-BENCHMARKS-REPORTS:READTEAMWIDGETS`   | View public Version Benchmark report widgets.    | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | —               |
| `VERSION-BENCHMARKS-REPORTS:READUSERWIDGETS`   | View private Version Benchmark report widgets.   | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | —               |
| `VERSION-BENCHMARKS-REPORTS:UPDATETEAMWIDGETS` | Manage public Version Benchmark report widgets.  | Data Admin, Observability Lead, Platform Admin, Standard User                 | —               |
| `VERSION-BENCHMARKS-REPORTS:UPDATEUSERWIDGETS` | Manage private Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Standard User                 | —               |
