Permissions List

The following table lists the name, description, resource, and action for all available role-based permissions in Coralogix. Each resource has corresponding read and write permissions, among others.

Actions

Resource	Description
`TEAM-ACTIONS:EXECUTE`	Execute shared actions.
`TEAM-ACTIONS:READCONFIG`	View shared actions.
`TEAM-ACTIONS:UPDATECONFIG`	Manage shared actions.
`USER-ACTIONS:EXECUTE`	Create user actions.
`USER-ACTIONS:READCONFIG`	View private actions.
`USER-ACTIONS:UPDATECONFIG`	Manage private actions.

Administrator

Resource	Description
`TEAM-API-KEYS-SECURITY-SETTINGS:MANAGE`	Manage security settings for API keys.
`TEAM-API-KEYS-SECURITY-SETTINGS:READCONFIG`	View security settings for API keys.
`TEAM-DOMAIN:MANAGE`	Create and modify your team's domain.
`TEAM-DOMAIN:READCONFIG`	View your team's domain.
`TEAM-GROUPS:MANAGE`	Create a group and control user membership and permissions.
`TEAM-GROUPS:READCONFIG`	View groups, membership, and permissions.
`TEAM-IP-ACCESS:MANAGE`	Configure and modify your team's IP access.
`TEAM-IP-ACCESS:READCONFIG`	View your team's IP access.
`TEAM-MEMBERS:MANAGE`	Control team membership by viewing, adding, and removing members.
`TEAM-MEMBERS:READCONFIG`	View your team members.
`TEAM-ROLES:MANAGE`	Create, delete, rename, and edit roles for your teams. To control team membership across all teams, use the Manage Team Membership permission.
`TEAM-ROLES:READCONFIG`	View roles for your team.
`TEAM-SCIM:MANAGE`	Configure and modify your team's SCIM.
`TEAM-SCIM:READCONFIG`	View your team's SCIM.
`TEAM-SESSIONS:MANAGE`	Define the duration of idle sessions for all users in the team. Enabling this option will end all current login sessions and require users to log in again.
`TEAM-SESSIONS:READCONFIG`	View the duration of idle sessions for all users in the team.
`TEAM-SLACK-NOTIFICATIONS:READCONFIG`	View team notifications on Slack.
`TEAM-SLACK-NOTIFICATIONS:UPDATECONFIG`	Create and manage team notifications on Slack.
`TEAM-SSO:MANAGE`	Configure and modify your team's SSO.
`TEAM-SSO:READCONFIG`	View your team's SSO.
`USER-SETTINGS:READCONFIG`	View the user's personal settings, such as the date format and the timezone.
`USER-SETTINGS:UPDATECONFIG`	Edit the user's personal settings, such as the date format and the timezone.
`TEAM:MANAGECONNECTIONTOORG`	Connect to or disconnect from an organization.
`USER-AUTH-INFO:READGROUPS`	Allows each user to view their group membership.
`USER-EMAIL-NOTIFICATIONS:GETDAILYEMAILS`	Manage the daily auto-generated report that summarizes errors and critical logs in your system.
`USER-EMAIL-NOTIFICATIONS:GETDATAUSAGEWARNINGS`	Manage notifications regarding your team quota limit.
`USER-EMAIL-NOTIFICATIONS:GETFLOWANOMALIES`	Manage flow anomaly notifications.
`USER-EMAIL-NOTIFICATIONS:GETSPIKEANOMALIES`	Manage spike anomaly notifications.
`TEAM-QUOTA:MANAGE`	Manage team quotas. Move quotas between 2 or more teams for which you have manage permissions.
`TEAM-QUOTA:READ`	View your team's quota.
`TEAM-SCOPES:MANAGE`	Create, delete, rename, and edit scopes for your teams.
`TEAM-SCOPES:READCONFIG`	View scopes for your team.
`DATA-INGEST-API-KEYS:MANAGE`	Create, modify and delete send your data API keys.
`DATA-INGEST-API-KEYS:READCONFIG`	View send your data API keys.
`PERSONAL-CUSTOM-API-KEYS:MANAGE`	Create, modify and delete personal API keys.
`PERSONAL-CUSTOM-API-KEYS:READCONFIG`	View personal API keys.
`TEAM-CUSTOM-API-KEYS:MANAGE`	Create, modify and delete team level API keys.
`TEAM-CUSTOM-API-KEYS:READCONFIG`	View team level API keys.
`TEAM-LANDING-PAGE:MANAGE`	Define the default homepage for a whole team.
`TEAM-LANDING-PAGE:READCONFIG`	View the default homepage for a whole team.
`TEAM-AI-SETINGS:MANAGE`	Allow users to manage the AI team settings and the individual toggle state for each AI feature.
`TEAM-AI-SETTINGS:READCONFIG`	Allow users to view the AI team settings and the individual toggle state for each AI feature.
`ACCESS-POLICIES:READALL`	View any access policy.
`ACCESS-POLICIES:UPDATEALL`	Manage any access policy.
`DATA-INGEST-API-KEYS:READACCESSPOLICY`	View send-your-data API key access policies.
`DATA-INGEST-API-KEYS:UPDATEACCESSPOLICY`	Create, modify, and delete send-your-data API key access policies.
`TEAM-CUSTOM-API-KEYS:READACCESSPOLICY`	View team level API key access policies.
`TEAM-CUSTOM-API-KEYS:UPDATEACCESSPOLICY`	Update team level API key access policies.
`TEAM-ROLES:READSUMMARY`	Read groups summary.
`TEAM-ROLES:READTEAMMEMBERSSUMMARY`	Read team members summary.

AI

Resource	Description
`AI-APP-CATALOG:READ`	View Application Catalog.
`AI-APP-DISCOVERY:MANAGE`	Activate AI App Discovery and rescan to detect new AI apps.
`AI-APP-DISCOVERY:READ`	View AI App Discovery.
`AI-APP-EVALUATORS:MANAG`	Add, edit, and delete evals for an application.
`AI-APP-EVALUATORS:READ`	View Application Eval Catalog.
`AI-OVERVIEW:READ`	View AI Overview.
`AI-SPM:READ`	View AI Security Posture Management.

Alerts

Resource	Description
`ALERTS-MAP:READ`	View visualized alerts in Alerts Map.
`ALERTS:READCONFIG`	View Flow alert settings.
`ALERTS:UPDATECONFIG`	Manage Flow alert settings.
`LOGS.ALERTS:READCONFIG`	View log-based alert settings.
`LOGS.ALERTS:UPDATECONFIG`	Manage log-based alert settings.
`SPANS.ALERTS:READCONFIG`	View Trace Alerts settings.
`SPANS.ALERTS:UPDATECONFIG`	Manage Trace Alerts settings.
`METRICS.ALERTS:READCONFIG`	View Metric Alert settings.
`METRICS.ALERTS:UPDATECONFIG`	Define and modify alert settings for Metric Alerts.
`ALERTS:SNOOZE`	Snooze or unsnooze an Alert.
`SUPPRESSION-RULES:READCONFIG`	Read Suppression-Rules settings.
`SUPPRESSION-RULES:UPDATECONFIG`	Manage Suppression-Rules settings.
`TEAM-ALERTS-SETTINGS:MANAGE`	Manage state of the toggle settings.
`TEAM-ALERTS-SETTINGS:READCONFIG`	View the toggle in Settings.
`SLO-MGMT.ALERTS:READCONFIG`	View SLO-based Alert Settings.
`SLO-MGMT.ALERTS:UPDATECONFIG`	Manage SLO-based Alert Settings.

APM

Resource	Description
`SERVERLESS:READ`	View Serverless Monitoring data.
`SERVICE-CATALOG:UPDATEDIMENSIONSCONFIG`	Manage Service Catalog dimensions.
`SERVICE-CATALOG:UPDATESLICONFIG`	Manage Service Catalog SLIs.
`SERVICE-MAP:READ`	View Service Map.
`SERVICE-CATALOG:READ`	View Service Catalog data.
`SERVICE-CATALOG:UPDATEAPDEXCONFIG`	Manage the Apdex configuration.
`SERVICE-CATALOG:UPDATE`	Manage Service Catalog services.

Auditing

Resource	Description
`TEAM-AUDITING:READCONFIG`	View team audit settings.
`TEAM-AUDITING:UPDATECONFIG`	Manage your team audit settings.

Coralogix Apps

Resource	Description
`LEGACY-ARCHIVE-QUERIES:EXECUTE`	Query data from the S3 archive.
`LEGACY-ARCHIVE-QUERIES:REINDEX`	Reindex archive queries.
`TEAM-SAVED-VIEWS:READ`	View public shared views in the Explore Screen.
`TEAM-SAVED-VIEWS:UPDATE`	Manage public shared views in the Explore Screen.
`USER-SAVED-VIEWS:READ`	View private shared views in the Explore Screen.
`USER-SAVED-VIEWS:UPDATE`	Manage private shared views in the Explore Screen.

Custom Dashboards

Resource	Description
`HOME-DASHBOARD:READTEAMWIDGETS`	View public Home Dashboard widgets.
`HOME-DASHBOARD:READUSERWIDGETS`	View private Home Dashboard widgets.
`HOME-DASHBOARD:UPDATETEAMWIDGETS`	Manage public Home Dashboard widgets.
`HOME-DASHBOARD:UPDATEUSERWIDGETS`	View private Home Dashboard widgets.
`TEAM-DASHBOARDS:READ`	View public Custom Dashboard.
`TEAM-DASHBOARDS:UPDATE`	Manage public Custom Dashboard.
`TEAM-DASHBOARDS:READACCESSPOLICY`	View public Custom Dashboard access policies.
`TEAM-DASHBOARDS:UPDATEACCESSPOLICY`	Manage public Custom Dashboard access policies.

Data Engine

Resource	Description
`SYSTEM-DATASETS:MANAGE`	Manage system datasets.
`SYSTEM-DATASETS:READCONFIG`	View system datasets.
`PIPELINE-ANALYZER:READ`	Inspect the exact rules applied to each log.
`TEAM-DATASETS:APPENDDATA`	Allow users to add new data to datasets.
`TEAM-DATASETS:OVERWRITEDATA`	Allow users to replace existing dataset content.
`TEAM-DATASETS:READACCESSPOLICY`	Allow users to read access policy for a specific datasets.
`TEAM-DATASETS:READDATA`	Allow users to read data from datasets.
`TEAM-DATASETS:UPDATEACCESSPOLICY`	Allow users to update access policy for a specific datasets.
`SYSTEM-DATASETS:READACCESSPOLICY`	Allow users to read access policy for a specific datasets.
`SYSTEM-DATASETS:UPDATEACCESSPOLICY`	Allow users to update access policy for a specific datasets.
`SYSTEM-DATASETS:APPENDDATA`	Allow users to add new data to datasets.
`SYSTEM-DATASETS:OVERWRITEDATA`	Allow users to replace existing dataset content.
`SYSTEM-DATASETS:READDATA`	Allow users to read data from datasets.

Data Plans

Resource	Description
`DATA-USAGE:MANAGE`	Enable and disable Data Usage Metrics.
`DATA-USAGE:READ`	View Data Usage Metrics.
`LOGS.TCO:READPOLICIES`	View existing log TCO policies.
`LOGS.TCO:UPDATEPOLICIES`	View and modify existing log TCO policies and create new ones.
`METRICS.TCO:READPOLICIES`	View metrics TCO policies.
`METRICS.TCO:UPDATEPOLICIES`	Manage metrics TCO policies.
`SPANS.TCO:READPOLICIES`	View existing tracing TCO policies.
`SPANS.TCO:UPDATEPOLICIES`	View and modify existing tracing TCO policies and create new ones.
`TEAM-PAY-AS-YOU-GO:READCONFIG`	View Pay-As-You-Go settings.
`TEAM-PAY-AS-YOU-GO:UPDATECONFIG`	Manage Pay-As-You-Go settings.
`TEAM-PAYMENTS:READCONFIG`	View your team's account and payment method.
`TEAM-PAYMENTS:UPDATECONFIG`	Manage your team's account and payment method.

Datamap

Resource	Description
`DATA-MAP:READMAPS`	View DataMap configurations.
`DATA-MAP:UPDATEMAPS`	Configure DataMap.

Enrichments

Resource	Description
`CLOUD-METADATA-ENRICHMENT:READCONFIG`	View AWS Enrichment configuration.
`CLOUD-METADATA-ENRICHMENT:UPDATECONFIG`	Manage AWS Enrichment configuration.
`GEO-ENRICHMENT:READCONFIG`	View Geo Enrichment configuration.
`GEO-ENRICHMENT:UPDATECONFIG`	Manage Geo Enrichment configuration.
`SECURITY-ENRICHMENT:READCONFIG`	View the Unified Threat Intelligence Enrichment configuration.
`SECURITY-ENRICHMENT:UPDATECONFIG`	Manage the Unified Threat Intelligence Enrichment configuration.
`TEAM-CUSTOM-ENRICHMENT:READCONFIG`	View the Custom Enrichment configuration.
`TEAM-CUSTOM-ENRICHMENT:READDATA`	View the Custom Enrichment data.
`TEAM-CUSTOM-ENRICHMENT:UPDATECONFIG`	Manage the Custom Enrichment configuration.
`TEAM-CUSTOM-ENRICHMENT:UPDATEDATA`	Manage data for Custom Enrichment ingestion.

Hosted Apps

Resource	Description
`GRAFANA:READ`	View Grafana Dashboards.
`GRAFANA:UPDATE`	Create, modify, and remove Grafana Dashboards.
`OPENSEARCH-DASHBOARDS:READ`	View OpenSearch dashboards.
`OPENSEARCH-DASHBOARDS:UPDATE`	Create, modify, and remove OpenSearch dashboards.

Incidents

Resource	Description
`INCIDENTS:ACKNOWLEDGE`	Acknowledge events in triggered alerts.
`INCIDENTS:ASSIGN`	Assign an event in triggered alerts.
`INCIDENTS:CLOSE`	Manually resolve events in triggered alerts.
`INCIDENTS:READ`	View events in triggered alerts.
`INCIDENTS:SNOOZE`	Snooze events in triggered alerts.

Infrastructure Monitoring

Resource	Description
`K8S-INFRA-MONITORING:READCONFIG`	View the Kubernetes Infrastructure Monitoring configuration.
`K8S-INFRA-MONITORING:UPDATECONFIG`	Manage the Kubernetes Infrastructure Monitoring configuration.
`K8S-INFRA-MONITORING:READ`	View Kubernetes Infrastructure Monitoring data.
`RESOURCE-CATALOG:READ`	View Resource Catalog data.

Integrations

Resource	Description
`CONTEXTUAL-DATA:READCONFIG`	View configurations for Native Integrations (Contextual Data).
`CONTEXTUAL-DATA:UPDATECONFIG`	Manage configurations for Native Integrations (Contextual Data).
`EXTENSIONS:DEPLOY`	Deploy, undeploy, and update extension packages.
`EXTENSIONS:READCONFIG`	View extension packages.
`INTEGRATIONS:DEPLOY`	Deploy, undeploy, and update integrations.
`INTEGRATIONS:READCONFIG`	View deployed integration packages.
`EXTENSIONS:UPDATECONFIG`	Add, update, or delete extension packages.

Investigations

Resource	Description
`INVESTIGATIONS:READ`	View investigations to which you've been invited or are public.
`INVESTIGATIONS:READALL`	View all private and public investigations without invitation.
`INVESTIGATIONS:UPDATE`	Create and update investigations to which you've been invited or are public.
`INVESTIGATIONS:UPDATEALL`	Create investigations and update all private and public investigations without invitation.

Livetail

Resource	Description
`LIVETAIL:READ`	View LiveTail data.

Logs

Resource	Description
`LOGS.DATA-ANALYTICS#HIGH:READ`	View metadata for frequent-search logs in the form of mapping statistics.
`LOGS.DATA-API#HIGH:READDATA`	Query frequent-search logs.
`LOGS.DATA-API#LOW:READDATA`	Query Monitoring and Compliance logs.
`LOGS.DATA-SETUP#LOW:READCONFIG`	View archive settings for Monitoring and Compliance logs.
`LOGS.DATA-SETUP#LOW:UPDATECONFIG`	Manage archive settings for Monitoring and Compliance logs.
`LOGS.RESERVED-FIELDS:MANAGE`	Add, edit, or delete the schema's fields.
`LOGS.RESERVED-FIELDS:READ`	Only view the fields of the schema.
`SPLIT-INDEX:MANAGE`	Apply split index on demand to apply reserved field changes.

Metrics

Resource	Description
`METRICS.DATA-ANALYTICS#HIGH:READ`	View metrics metadata under Metrics Usage.
`METRICS.DATA-API#HIGH:READDATA`	Query metrics.
`METRICS.DATA-SETUP#LOW:READCONFIG`	View archive bucket settings.
`METRICS.DATA-SETUP#LOW:UPDATECONFIG`	Manage archive bucket settings.

Notifications

Resource	Description
`OUTBOUND-WEBHOOKS:READCONFIG`	View generic outbound webhooks configuration.
`OUTBOUND-WEBHOOKS:UPDATECONFIG`	Create and modify the outbound webhooks configuration.
`OUTBOUND-WEBHOOKS:READSUMMARY`	View all available outbound webhooks names.
`NOTIFICATION-CENTER-CONNECTORS:READCONFIG`	View the existing connectors in the notification center and their field data.
`NOTIFICATION-CENTER-CONNECTORS:READSUMMARY`	View the list of existing connectors in the notification center.
`NOTIFICATION-CENTER-CONNECTORS:UPDATECONFIG`	Create and edit connectors in the notification center and their field data.
`NOTIFICATION-CENTER-PRESETS:READCONFIG`	View the existing presets in the notification center and their field templates.
`NOTIFICATION-CENTER-PRESETS:READSUMMAR`	View the list of existing presets in the notification center.
`NOTIFICATION-CENTER-PRESETS:UPDATECONFIG`	Create and edit presets in the notification center and their field templates.
`NOTIFICATION-CENTER-ROUTERS:READCONFIG`	View the existing routers in the notification center and their routing rules.
`NOTIFICATION-CENTER-ROUTERS:READSUMMARY`	View the list of existing routers in the notification center.
`NOTIFICATION-CENTER-ROUTERS:UPDATECONFIG`	Create and edit routers in the notification center and their routing rules.

Parsing Rules

Resource	Description
`PARSING-RULES:READCONFIG`	View parsing rules.
`PARSING-RULES:UPDATECONFIG`	Create, modify, or remove parsing rules.

Quota Rules

Resource	Description
`TEAM-QUOTA-RULES:MANAGE`	Manage team quota rules. Allocate quota units per entity type.
`TEAM-QUOTA-RULES:READ`	View team quota rules. Allocate quota units per entity type.

Real-User Monitoring (RUM)

Resource	Description
`RUM:VIEW`	View RUM.
`SOURCE-MAPPING:READMAPPING`	Read RUM source maps.
`SOURCE-MAPPING:UPLOADMAPPING`	Upload RUM source maps.
`RUM-TEAM-SAVED-FILTER:READ`	View public saved filters in your RUM dashboard.
`RUM-TEAM-SAVED-FILTER:UPDATE`	Manage public saved filters in your RUM dashboard.
`RUM-USER-SAVED-FILTER:READ`	View private saved filters in your RUM dashboard.
`RUM-USER-SAVED-FILTER:UPDATE`	Manage private saved filters in your RUM dashboard.
`HIDE-ERRORS:READCONFIG`	View hidden errors in the UI.
`HIDE-ERRORS:UPDATECONFIG`	Hide specific errors from the UI.
`RUM-SETTINGS:UPDATECONFIG`	Manage RUM settings.
`SESSION-RECORDING:READCONFIG`	Record user sessions.

Recording Rules

Resource	Description
`LOGS.EVENTS2METRICS:READCONFIG`	View Events2Metrics configuration when the source input is logs.
`LOGS.EVENTS2METRICS:UPDATECONFIG`	Configure or modify the configuration for Events2Metrics, when the source input is logs.
`METRICS.RECORDING-RULES:READCONFIG`	View recording rules.
`METRICS.RECORDING-RULES:UPDATECONFIG`	Create, modify, or import recording rules.
`SPANS.EVENTS2METRICS:READCONFIG`	View Events2Metrics configuration when the source input is spans.
`SPANS.EVENTS2METRICS:UPDATECONFIG`	Configure or modify the configuration for Event2Metrics, when the source input is spans.
`GLOBAL-MAPPING:READCONFIG`	View Label Mapping.
`GLOBAL-MAPPING:UPDATECONFIG`	Manage Label Mapping.
`TEAM-SCHEMA-MANAGER:MANAGE`	Allow users to edit, reserve, or map schema fields as needed.
`TEAM-SCHEMA-MANAGER:READCONFIG`	Allow users to see field names, types, cardinality, popularity, and other schema-level metrics.

Profiles

Resource	Description
`PROFILES.CPU-PROFILES:READ`	View CPU profiling data.
`PROFILES.DEBUG-SYMBOLS:UPLOAD`	Upload debug symbols.

SLO Management

Resource	Description
`SLO:READCONFIG`	View SLO settings.
`SLO:UPDATECONFIG`	Manage SLO settings.

Snowbit

Resource	Description
`CLOUD-SECURITY:DEPLOY`	Deploy and undeploy Coralogix Cloud Security (STA).
`CLOUD-SECURITY:READCONFIG`	View configuration for, and status of, Coralogix Cloud Security (STA).
`SNOWBIT.ALERTS:CREATESECURITYALERT`	Create an STA Alert.
`SNOWBIT.ALERTS:READ`	View STA Alert settings.
`SNOWBIT.CSPM:READ`	View Cloud Posture Security Management data.
`SNOWBIT.OVERVIEW:READ`	View Snowbit overview data.
`SNOWBIT.RESOURCE-EXPLORER:READ`	View Snowbit Resource Explorer data.
`SNOWBIT.SETUP:MANAGE`	View Snowbit SSPM data.

Spans

Resource	Description
`SPANS.DATA-API#HIGH:READDATA`	Query frequent-search spans.
`SPANS.DATA-API#LOW:READDATA`	Query Monitoring and Compliance spans.

Version Benchmarks

Resource	Description
`VERSION-BENCHMARK-TAGS:READ`	View Version Benchmark tags.
`VERSION-BENCHMARKS-REPORTS:READTEAMWIDGETS`	View public Version Benchmark report widgets.
`VERSION-BENCHMARKS-REPORTS:READUSERWIDGETS`	View private Version Benchmark report widgets.
`VERSION-BENCHMARKS-REPORTS:UPDATETEAMWIDGETS`	Manage public Version Benchmark report widgets.
`VERSION-BENCHMARKS-REPORTS:UPDATEUSERWIDGETS`	Manage private Version Benchmark report widgets.
`VERSION-BENCHMARKS-REPORTS:READ`	View Version Benchmark reports.
`VERSION-BENCHMARK-TAGS:UPDATE`	Modify Version Benchmark tags.

Previous Roles

Next Policies