# Permissions list The following tables list all available [role-based permissions](https://coralogix.com/docs/user-guides/account-management/user-management/create-roles-and-permissions/index.md) in Coralogix. For each permission, you can also see which **system roles** include it by default and which **API presets** it is part of (when applicable). **Filter by system role:** All roles Data Admin No-Access User Observability Lead Platform Admin Read-Only User Security User Standard User    **Filter by API preset:** All presets APIKeys APM Actions AiObservability Alerts Auditing CICDIntegration ContextualData Dashboards DataAnalytics DataMap DataQuerying DataSetup DataUsage Enrichments Events2Metrics Extensions FleetManagement Grafana Incidents InfraMonitoring Integrations LiveTail NotificationCenter Olly OpenSearchDashboards OutboundWebhooks ParsingRules Payments RecordingRules SLO SavedViews Security SourceMapping TCOPolicies TeamAdmin **Search:** Clear [Actions](https://coralogix.com/docs/user-guides/monitoring-and-insights/logs-screen/coralogix-actions/) | Resource | Description | System roles | API presets | | --------------------------- | ----------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `TEAM-ACTIONS:EXECUTE` | Execute shared actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions | | `TEAM-ACTIONS:READCONFIG` | View shared actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions | | `TEAM-ACTIONS:UPDATECONFIG` | Manage shared actions. | Data Admin, Observability Lead, Platform Admin, Security User | Actions | | `USER-ACTIONS:EXECUTE` | Create user actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions | | `USER-ACTIONS:READCONFIG` | View private actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions | | `USER-ACTIONS:UPDATECONFIG` | Manage private actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions | [Administrator](https://coralogix.com/docs/user-guides/account-management/organization-management/create-an-organization) | Resource | Description | System roles | API presets | | ----------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `ACCESS-POLICIES:READALL` | View any access policy. | — | — | | `ACCESS-POLICIES:UPDATEALL` | Manage any access policy. | — | — | | `DATA-INGEST-API-KEYS:MANAGE` | Create, modify and delete send your data API keys. | Data Admin, Platform Admin | APIKeys | | `DATA-INGEST-API-KEYS:READACCESSPOLICY` | View send-your-data API key access policies. | — | — | | `DATA-INGEST-API-KEYS:READCONFIG` | View send your data API keys. | Data Admin, Observability Lead, Platform Admin | APIKeys | | `DATA-INGEST-API-KEYS:UPDATEACCESSPOLICY` | Create, modify, and delete send-your-data API key access policies. | — | — | | `PERSONAL-API-KEYS-REGISTRY:MANAGE` | Lifecycle actions across users personal API keys. | Platform Admin | — | | `PERSONAL-API-KEYS-REGISTRY:READ` | List/view personal API keys metadata across users. | Platform Admin | — | | `PERSONAL-CUSTOM-API-KEYS:MANAGE` | Create, modify and delete personal API keys. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | APIKeys | | `PERSONAL-CUSTOM-API-KEYS:READCONFIG` | View personal API keys. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | APIKeys | | `SECURE-LOGIN:MANAGE` | Configure SSO, MFA/2FA enforcement, and other login-related security policies. | Platform Admin | — | | `SECURE-LOGIN:VIEW` | View SSO, MFA/2FA enforcement, and other login-related security policies. | Platform Admin | — | | `TEAM:MANAGECONNECTIONTOORG` | Connect to or disconnect from an organization. | Platform Admin | — | | `TEAM-AI-SETTINGS:MANAGE` | Allow users to manage the AI team settings and the individual toggle state for each AI feature. | Platform Admin | — | | `TEAM-AI-SETTINGS:READCONFIG` | Allow users to view the AI team settings and the individual toggle state for each AI feature. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-API-KEYS-SECURITY-SETTINGS:MANAGE` | Manage security settings for API keys. | Data Admin, Platform Admin | — | | `TEAM-API-KEYS-SECURITY-SETTINGS:READCONFIG` | View security settings for API keys. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-CUSTOM-API-KEYS:MANAGE` | Create, modify and delete team level API keys. | Platform Admin | APIKeys | | `TEAM-CUSTOM-API-KEYS:READACCESSPOLICY` | View team level API key access policies. | — | — | | `TEAM-CUSTOM-API-KEYS:READCONFIG` | View team level API keys. | Platform Admin | APIKeys | | `TEAM-CUSTOM-API-KEYS:UPDATEACCESSPOLICY` | Update team level API key access policies. | — | — | | `TEAM-DOMAIN:MANAGE` | Create and modify your team's domain. | Platform Admin | TeamAdmin | | `TEAM-DOMAIN:READCONFIG` | View your team's domain. | Platform Admin | TeamAdmin | | `TEAM-GROUPS:MANAGE` | Create a group and control user membership and permissions. | Platform Admin | TeamAdmin | | `TEAM-GROUPS:READCONFIG` | View groups, membership, and permissions. | Platform Admin | TeamAdmin | | `TEAM-IP-ACCESS:MANAGE` | Configure and modify your team's IP access. | Platform Admin | TeamAdmin | | `TEAM-IP-ACCESS:READCONFIG` | View your team's IP access. | Platform Admin | TeamAdmin | | `TEAM-LANDING-PAGE:MANAGE` | Define the default homepage for a whole team. | Platform Admin | TeamAdmin | | `TEAM-LANDING-PAGE:READCONFIG` | View the default homepage for a whole team. | Platform Admin | TeamAdmin | | `TEAM-MEMBERS:MANAGE` | Control team membership by viewing, adding, and removing members. | Platform Admin | TeamAdmin | | `TEAM-MEMBERS:READCONFIG` | View your team members. | Platform Admin | TeamAdmin | | `TEAM-QUOTA:MANAGE` | Manage team quotas. Move quotas between 2 or more teams for which you have manage permissions. | Platform Admin | — | | `TEAM-QUOTA:READ` | View your team's quota. | Platform Admin | — | | `TEAM-ROLES:MANAGE` | Create, delete, rename, and edit roles for your teams. To control team membership across all teams, use the Manage Team Membership permission. | Platform Admin | TeamAdmin | | `TEAM-ROLES:READCONFIG` | View roles for your team. | Platform Admin | TeamAdmin | | `TEAM-ROLES:READSUMMARY` | Read groups summary. | — | — | | `TEAM-ROLES:READTEAMMEMBERSSUMMARY` | Read team members summary. | — | — | | `TEAM-SCIM:MANAGE` | Configure and modify your team's SCIM. | Platform Admin | TeamAdmin | | `TEAM-SCIM:READCONFIG` | View your team's SCIM. | Platform Admin | TeamAdmin | | `TEAM-SCOPES:MANAGE` | Create, delete, rename, and edit scopes for your teams. | Platform Admin | TeamAdmin | | `TEAM-SCOPES:READCONFIG` | View scopes for your team. | Platform Admin | TeamAdmin | | `TEAM-SESSIONS:MANAGE` | Define the duration of idle sessions for all users in the team. Enabling this option will end all current login sessions and require users to log in again. | Platform Admin | TeamAdmin | | `TEAM-SESSIONS:READCONFIG` | View the duration of idle sessions for all users in the team. | Platform Admin | TeamAdmin | | `TEAM-SLACK-NOTIFICATIONS:READCONFIG` | View team notifications on Slack. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-SLACK-NOTIFICATIONS:UPDATECONFIG` | Create and manage team notifications on Slack. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-SSO:MANAGE` | Configure and modify your team's SSO. | Platform Admin | TeamAdmin | | `TEAM-SSO:READCONFIG` | View your team's SSO. | Platform Admin | TeamAdmin | | `USER-AUTH-INFO:READGROUPS` | Allows each user to view their group membership. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `USER-EMAIL-NOTIFICATIONS:GETDAILYEMAILS` | Manage the daily auto-generated report that summarizes errors and critical logs in your system. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `USER-EMAIL-NOTIFICATIONS:GETDATAUSAGEWARNINGS` | Manage notifications regarding your team quota limit. | Data Admin, Platform Admin | — | | `USER-EMAIL-NOTIFICATIONS:GETFLOWANOMALIES` | Manage flow anomaly notifications. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `USER-EMAIL-NOTIFICATIONS:GETSPIKEANOMALIES` | Manage spike anomaly notifications. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `USER-SETTINGS:READCONFIG` | View the user's personal settings, such as the date format and the timezone. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `USER-SETTINGS:UPDATECONFIG` | Edit the user's personal settings, such as the date format and the timezone. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | [AI](https://coralogix.com/docs/user-guides/ai-observability/ai-center/) | Resource | Description | System roles | API presets | | -------------------------- | ----------------------------------------------------------- | -------------------------------------------------------------------------------------------- | --------------- | | `AI-APP-CATALOG:READ` | View Application Catalog. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability | | `AI-APP-DISCOVERY:MANAGE` | Activate AI App Discovery and rescan to detect new AI apps. | Data Admin, Observability Lead, Platform Admin | AiObservability | | `AI-APP-DISCOVERY:READ` | View AI App Discovery. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability | | `AI-APP-EVALUATORS:MANAGE` | Add, edit, and delete evals for an application. | Data Admin, Observability Lead, Platform Admin | AiObservability | | `AI-APP-EVALUATORS:READ` | View Application Eval Catalog. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability | | `AI-CODE-AGENTS:READ` | View Code Agents dashboards. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability | | `AI-GUARDRAILS:MANAGE` | Add, edit, and delete AI Guardrails. | Data Admin, Observability Lead, Platform Admin | AiObservability | | `AI-OVERVIEW:READ` | View AI Overview. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability | | `AI-SPM:READ` | View AI Security Posture Management. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability | | `OLLY:SEND` | Send messages to Olly and receive responses. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Olly | | `OLLY-TEAM-RULES:MANAGE` | Add, edit, enable or disable, and delete Olly team rules. | Data Admin, Observability Lead, Platform Admin | Olly | | `OLLY-TEAM-RULES:READ` | View Olly team rules. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Olly | [Alerts](https://coralogix.com/docs/user-guides/alerting/introduction-to-alerts/) | Resource | Description | System roles | API presets | | --------------------------------------- | ---------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `ALERTS:READCONFIG` | View Flow alert settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts | | `ALERTS:SNOOZE` | Snooze or unsnooze an Alert. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts | | `ALERTS:UPDATECONFIG` | Manage Flow alert settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts | | `ALERTS-MAP:READ` | View visualized alerts in Alerts Map. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts | | `ALERTS-SAVED-VIEWS:MANAGE` | Manage saved views in Alerts. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | SavedViews | | `ALERTS-SAVED-VIEWS:READ` | View saved views in Alerts. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | SavedViews | | `ALERTS-SAVED-VIEWS:READACCESSPOLICY` | View access policies for Alerts saved views. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews | | `ALERTS-SAVED-VIEWS:UPDATEACCESSPOLICY` | Manage access policies for Alerts saved views. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews | | `ALERTS-TEAM-DEFAULT-VIEWS:MANAGE` | Define the team-level default view in Alert Management settings. | Platform Admin | SavedViews | | `ALERTS-TEAM-DEFAULT-VIEWS:READ` | View the team-level default view in Alert Management settings. | Platform Admin | SavedViews | | `LOGS.ALERTS:READCONFIG` | View log-based alert settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts | | `LOGS.ALERTS:UPDATECONFIG` | Manage log-based alert settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts | | `METRICS.ALERTS:READCONFIG` | View Metric Alert settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts | | `METRICS.ALERTS:UPDATECONFIG` | Define and modify alert settings for Metric Alerts. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts | | `SLO-MGMT.ALERTS:READCONFIG` | View SLO-based Alert Settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SLO | | `SLO-MGMT.ALERTS:UPDATECONFIG` | Manage SLO-based Alert Settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | SLO | | `SPANS.ALERTS:READCONFIG` | View Trace Alerts settings. | Data Admin, Observability Lead, Platform Admin, Standard User | Alerts | | `SPANS.ALERTS:UPDATECONFIG` | Manage Trace Alerts settings. | Data Admin, Observability Lead, Platform Admin, Standard User | Alerts | | `SUPPRESSION-RULES:READCONFIG` | Read Suppression-Rules settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts | | `SUPPRESSION-RULES:UPDATECONFIG` | Manage Suppression-Rules settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts | | `TEAM-ALERTS-SETTINGS:MANAGE` | Manage state of the toggle settings. | Data Admin, Observability Lead, Platform Admin | Alerts | | `TEAM-ALERTS-SETTINGS:READCONFIG` | View the toggle in Settings. | Data Admin, Observability Lead, Platform Admin | Alerts | [APM](https://coralogix.com/docs/user-guides/apm/getting-started/apm-onboarding-tutorial/) | Resource | Description | System roles | API presets | | ---------------------------------------- | ---------------------------------- | ----------------------------------------------------------------------------- | ----------- | | `SERVERLESS:READ` | View Serverless Monitoring data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM | | `SERVICE-CATALOG:READ` | View Service Catalog data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM | | `SERVICE-CATALOG:UPDATE` | Manage Service Catalog services. | Data Admin, Observability Lead, Platform Admin | APM | | `SERVICE-CATALOG:UPDATEAPDEXCONFIG` | Manage the Apdex configuration. | Data Admin, Observability Lead, Platform Admin | APM | | `SERVICE-CATALOG:UPDATEDIMENSIONSCONFIG` | Manage Service Catalog dimensions. | Data Admin, Observability Lead, Platform Admin | APM | | `SERVICE-CATALOG:UPDATESLICONFIG` | Manage Service Catalog SLIs. | Data Admin, Observability Lead, Platform Admin | APM | | `SERVICE-MAP:READ` | View Service Map. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM | [Auditing](https://coralogix.com/docs/user-guides/troubleshooting/coralogix-audit/) | Resource | Description | System roles | API presets | | ---------------------------- | -------------------------------- | -------------------------- | ----------- | | `TEAM-AUDITING:READCONFIG` | View team audit settings. | Data Admin, Platform Admin | Auditing | | `TEAM-AUDITING:UPDATECONFIG` | Manage your team audit settings. | Data Admin, Platform Admin | Auditing | [Cases](https://coralogix.com/docs/user-guides/notification-center/entity-types/cases/) | Resource | Description | System roles | API presets | | -------------------------------------- | ----------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `CASE:ACKNOWLEDGE` | Acknowledge a case. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `CASE:ASSIGN` | Assign a case to yourself or to other users. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `CASE:CLOSE` | Close a case. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `CASE:COMMENT` | Comment on a case. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `CASE:READ` | View the list of cases and individual cases. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `CASE:UPDATE` | Update the case. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `CASE-CONFIG:READ` | View Suppression window and Snooze period settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `CASE-CONFIG:UPDATE` | Modify Suppression window and Snooze period settings. | Data Admin, Observability Lead, Platform Admin | — | | `CASES-SAVED-VIEWS:MANAGE` | Manage saved views in Cases. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews | | `CASES-SAVED-VIEWS:READ` | View saved views in Cases. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews | | `CASES-SAVED-VIEWS:READACCESSPOLICY` | View access policies for Cases saved views. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews | | `CASES-SAVED-VIEWS:UPDATEACCESSPOLICY` | Manage access policies for Cases saved views. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews | | `CASES-TEAM-DEFAULT-VIEWS:MANAGE` | Define the team-level default view in Cases settings. | Platform Admin | SavedViews | | `CASES-TEAM-DEFAULT-VIEWS:READ` | View the team-level default view in Cases settings. | Platform Admin | SavedViews | [Coralogix Apps](https://coralogix.com/docs/user-guides/data-query/archive-query/access-cx-data-directly/) | Resource | Description | System roles | API presets | | ------------------------------------- | -------------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------ | | `LEGACY-ARCHIVE-QUERIES:EXECUTE` | Query data from the S3 archive. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying | | `LEGACY-ARCHIVE-QUERIES:REINDEX` | Reindex archive queries. | Data Admin, Platform Admin | — | | `TEAM-SAVED-VIEWS:READ` | View public shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews | | `TEAM-SAVED-VIEWS:READACCESSPOLICY` | View access policies for public shared views. | — | — | | `TEAM-SAVED-VIEWS:UPDATE` | Manage public shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews | | `TEAM-SAVED-VIEWS:UPDATEACCESSPOLICY` | Manage access policies for public shared views. | — | — | | `USER-SAVED-VIEWS:READ` | View private shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews | | `USER-SAVED-VIEWS:UPDATE` | Manage private shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews | [Custom Dashboards](https://coralogix.com/docs/user-guides/custom-dashboards/introduction/) | Resource | Description | System roles | API presets | | ------------------------------------ | ---------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `DASHBOARD-FOLDER:MANAGE` | Create, rename, and delete Custom Dashboard folders. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `DASHBOARD-FOLDER:VIEW` | View Custom Dashboard folders. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `HOME-DASHBOARD:READTEAMWIDGETS` | View public Home Dashboard widgets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `HOME-DASHBOARD:READUSERWIDGETS` | View private Home Dashboard widgets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `HOME-DASHBOARD:UPDATETEAMWIDGETS` | Manage public Home Dashboard widgets. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `HOME-DASHBOARD:UPDATEUSERWIDGETS` | View private Home Dashboard widgets. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `TEAM-DASHBOARDS:READ` | View public Custom Dashboard. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Dashboards | | `TEAM-DASHBOARDS:READACCESSPOLICY` | View public Custom Dashboard access policies. | — | — | | `TEAM-DASHBOARDS:UPDATE` | Manage public Custom Dashboard. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Dashboards | | `TEAM-DASHBOARDS:UPDATEACCESSPOLICY` | Manage public Custom Dashboard access policies. | — | — | [Data Engine](https://coralogix.com/docs/user-guides/data-layer/datasets/) | Resource | Description | System roles | API presets | | ------------------------------------ | ------------------------------------------------------------ | -------------------------------------------------------------------------------------------- | ----------- | | `PIPELINE-ANALYZER:READ` | Inspect the exact rules applied to each log. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `SYSTEM-DATASETS:APPENDDATA` | Allow users to add new data to datasets. | Data Admin, Observability Lead, Platform Admin, Security User | — | | `SYSTEM-DATASETS:MANAGE` | Manage system datasets. | Data Admin, Platform Admin | — | | `SYSTEM-DATASETS:OVERWRITEDATA` | Allow users to replace existing dataset content. | Data Admin, Observability Lead, Platform Admin | — | | `SYSTEM-DATASETS:READACCESSPOLICY` | Allow users to read access policy for a specific datasets. | Data Admin, Observability Lead, Platform Admin | — | | `SYSTEM-DATASETS:READCONFIG` | View system datasets. | Data Admin, Observability Lead, Platform Admin | — | | `SYSTEM-DATASETS:READDATA` | Allow users to read data from datasets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `SYSTEM-DATASETS:UPDATEACCESSPOLICY` | Allow users to update access policy for a specific datasets. | Platform Admin | — | | `TEAM-DATASET-RULES:MANAGE` | Create, update, and delete team dataset rules. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-DATASET-RULES:READCONFIG` | View team dataset rules. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-DATASETS:APPENDDATA` | Allow users to add new data to datasets. | Data Admin, Observability Lead, Platform Admin, Security User | — | | `TEAM-DATASETS:CREATE` | Create a dataset. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-DATASETS:DELETE` | Delete a dataset. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-DATASETS:OVERWRITEDATA` | Allow users to replace existing dataset content. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-DATASETS:READACCESSPOLICY` | Allow users to read access policy for a specific datasets. | Data Admin, Platform Admin | — | | `TEAM-DATASETS:READDATA` | Allow users to read data from datasets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `TEAM-DATASETS:RENAME` | Rename a dataset. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-DATASETS:UPDATEACCESSPOLICY` | Allow users to update access policy for a specific datasets. | Data Admin, Platform Admin | — | [Data Plans](https://coralogix.com/docs/user-guides/account-management/payment-and-billing/plan-and-payments-management/) | Resource | Description | System roles | API presets | | --------------------------------- | ------------------------------------------------------------------ | -------------------------------------------------------------------------------------------- | ----------- | | `DATA-USAGE:MANAGE` | Enable and disable Data Usage Metrics. | Data Admin, Platform Admin | DataUsage | | `DATA-USAGE:READ` | View Data Usage Metrics. | Data Admin, Platform Admin | DataUsage | | `LOGS.TCO:READPOLICIES` | View existing log TCO policies. | Data Admin, Observability Lead, Platform Admin, Security User | TCOPolicies | | `LOGS.TCO:UPDATEPOLICIES` | View and modify existing log TCO policies and create new ones. | Data Admin, Platform Admin | TCOPolicies | | `METRICS.TCO:READPOLICIES` | View metrics TCO policies. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | TCOPolicies | | `METRICS.TCO:UPDATEPOLICIES` | Manage metrics TCO policies. | Data Admin, Observability Lead, Platform Admin | TCOPolicies | | `SPANS.TCO:READPOLICIES` | View existing tracing TCO policies. | Data Admin, Observability Lead, Platform Admin | TCOPolicies | | `SPANS.TCO:UPDATEPOLICIES` | View and modify existing tracing TCO policies and create new ones. | Data Admin, Platform Admin | TCOPolicies | | `TEAM-PAY-AS-YOU-GO:READCONFIG` | View Pay-As-You-Go settings. | Data Admin, Platform Admin | Payments | | `TEAM-PAY-AS-YOU-GO:UPDATECONFIG` | Manage Pay-As-You-Go settings. | Platform Admin | Payments | | `TEAM-PAYMENTS:READCONFIG` | View your team's account and payment method. | Data Admin, Platform Admin | Payments | | `TEAM-PAYMENTS:UPDATECONFIG` | Manage your team's account and payment method. | Platform Admin | Payments | [Datamap](https://coralogix.com/docs/user-guides/custom-dashboards/widgets/polystat-widget/) | Resource | Description | System roles | API presets | | --------------------- | ---------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `DATA-MAP:READMAPS` | View DataMap configurations. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataMap | | `DATA-MAP:UPDATEMAPS` | Configure DataMap. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | DataMap | [Enrichments](https://coralogix.com/docs/user-guides/enrichment_rules/) | Resource | Description | System roles | API presets | | ---------------------------------------- | ---------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `CLOUD-METADATA-ENRICHMENT:READCONFIG` | View AWS Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments | | `CLOUD-METADATA-ENRICHMENT:UPDATECONFIG` | Manage AWS Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments | | `GEO-ENRICHMENT:READCONFIG` | View Geo Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments | | `GEO-ENRICHMENT:UPDATECONFIG` | Manage Geo Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments | | `SECURITY-ENRICHMENT:READCONFIG` | View the Unified Threat Intelligence Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments | | `SECURITY-ENRICHMENT:UPDATECONFIG` | Manage the Unified Threat Intelligence Enrichment configuration. | Data Admin, Platform Admin, Security User | Enrichments | | `TEAM-CUSTOM-ENRICHMENT:READCONFIG` | View the Custom Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments | | `TEAM-CUSTOM-ENRICHMENT:READDATA` | View the Custom Enrichment data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Enrichments | | `TEAM-CUSTOM-ENRICHMENT:UPDATECONFIG` | Manage the Custom Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments | | `TEAM-CUSTOM-ENRICHMENT:UPDATEDATA` | Manage data for Custom Enrichment ingestion. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments | [Data Exploration](https://coralogix.com/docs/user-guides/data_exploration/) | Resource | Description | System roles | API presets | | ---------------------------------------- | ----------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `EXPLORE-SAVED-VIEWS:MANAGE` | Manage saved views. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `EXPLORE-SAVED-VIEWS:READ` | View saved views. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `EXPLORE-SAVED-VIEWS:READACCESSPOLICY` | View the access policy for saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — | | `EXPLORE-SAVED-VIEWS:UPDATEACCESSPOLICY` | Manage the access policy for saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — | | `EXPLORE-TEAM-DEFAULT-VIEWS:MANAGE` | Manage the team default view in Explore. | Platform Admin | — | | `EXPLORE-TEAM-DEFAULT-VIEWS:READ` | View the team default view in Explore. | Platform Admin | — | [Fleet Management](https://coralogix.com/docs/user-guides/fleet-management/overview/) | Resource | Description | System roles | API presets | | ----------------------------- | --------------------------------------------- | -------------------------- | --------------- | | `REMOTE-CONFIGURATION:MANAGE` | Allow admins to manage remote configurations. | Data Admin, Platform Admin | FleetManagement | [Hosted Apps](https://coralogix.com/docs/user-guides/visualizations/hosted-opensearch-view/) | Resource | Description | System roles | API presets | | ------------------------------ | ------------------------------------------------- | -------------------------------------------------------------------------------------------- | -------------------- | | `GRAFANA:READ` | View Grafana Dashboards. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Grafana | | `GRAFANA:UPDATE` | Create, modify, and remove Grafana Dashboards. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Grafana | | `OPENSEARCH-DASHBOARDS:READ` | View OpenSearch dashboards. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OpenSearchDashboards | | `OPENSEARCH-DASHBOARDS:UPDATE` | Create, modify, and remove OpenSearch dashboards. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | OpenSearchDashboards | [Incidents](https://coralogix.com/docs/user-guides/alerting/incidents/) | Resource | Description | System roles | API presets | | ----------------------- | -------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `INCIDENTS:ACKNOWLEDGE` | Acknowledge events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Incidents | | `INCIDENTS:ASSIGN` | Assign an event in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User | Incidents | | `INCIDENTS:CLOSE` | Manually resolve events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User | Incidents | | `INCIDENTS:READ` | View events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Incidents | | `INCIDENTS:SNOOZE` | Snooze events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User | Incidents | [Infrastructure Monitoring](https://coralogix.com/docs/user-guides/infrastructure/infrastructure-explorer/overview/) | Resource | Description | System roles | API presets | | ----------------------------------- | -------------------------------------------------------------- | ----------------------------------------------------------------------------- | --------------- | | `K8S-INFRA-MONITORING:READ` | View Kubernetes Infrastructure Monitoring data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | InfraMonitoring | | `K8S-INFRA-MONITORING:READCONFIG` | View the Kubernetes Infrastructure Monitoring configuration. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | InfraMonitoring | | `K8S-INFRA-MONITORING:UPDATECONFIG` | Manage the Kubernetes Infrastructure Monitoring configuration. | Data Admin, Observability Lead, Platform Admin | InfraMonitoring | | `RESOURCE-CATALOG:READ` | View Resource Catalog data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | InfraMonitoring | [Integrations](https://coralogix.com/docs/integrations/getting-started/) | Resource | Description | System roles | API presets | | ------------------------------ | ---------------------------------------------------------------- | ------------------------------------------------------------- | -------------- | | `CONTEXTUAL-DATA:READCONFIG` | View configurations for Native Integrations (Contextual Data). | Data Admin, Observability Lead, Platform Admin, Security User | ContextualData | | `CONTEXTUAL-DATA:UPDATECONFIG` | Manage configurations for Native Integrations (Contextual Data). | Data Admin, Platform Admin | ContextualData | | `EXTENSIONS:DEPLOY` | Deploy, undeploy, and update extension packages. | Data Admin, Platform Admin, Security User | Extensions | | `EXTENSIONS:READCONFIG` | View extension packages. | Data Admin, Observability Lead, Platform Admin, Security User | Extensions | | `EXTENSIONS:UPDATECONFIG` | Add, update, or delete extension packages. | Data Admin, Platform Admin | Extensions | | `INTEGRATIONS:DEPLOY` | Deploy, undeploy, and update integrations. | Data Admin, Platform Admin | Integrations | | `INTEGRATIONS:READCONFIG` | View deployed integration packages. | Data Admin, Observability Lead, Platform Admin, Security User | Integrations | [Investigations](https://coralogix.com/docs/user-guides/investigations/overview/) | Resource | Description | System roles | API presets | | -------------------------- | ------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------- | ----------- | | `INVESTIGATIONS:READ` | View investigations to which you've been invited or are public. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `INVESTIGATIONS:READALL` | View all private and public investigations without invitation. | Observability Lead, Platform Admin, Security User | — | | `INVESTIGATIONS:UPDATE` | Create and update investigations to which you've been invited or are public. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — | | `INVESTIGATIONS:UPDATEALL` | Create investigations and update all private and public investigations without invitation. | Observability Lead, Platform Admin, Security User | — | [LiveTail](https://coralogix.com/docs/user-guides/monitoring-and-insights/livetail/) | Resource | Description | System roles | API presets | | --------------- | ------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `LIVETAIL:READ` | View LiveTail data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | LiveTail | [Logs](https://coralogix.com/docs/user-guides/data-query/log-query/log-query-simply-retrieve-your-data/) | Resource | Description | System roles | API presets | | ---------------------------------- | ------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------- | | `LOGS.DATA-ANALYTICS#HIGH:READ` | View metadata for frequent-search logs in the form of mapping statistics. | Data Admin, Platform Admin | DataAnalytics | | `LOGS.DATA-API#HIGH:READDATA` | Query frequent-search logs. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying | | `LOGS.DATA-API#LOW:READDATA` | Query Monitoring and Compliance logs. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying | | `LOGS.DATA-SETUP#LOW:READCONFIG` | View archive settings for Monitoring and Compliance logs. | Data Admin, Observability Lead, Platform Admin, Security User | DataSetup | | `LOGS.DATA-SETUP#LOW:UPDATECONFIG` | Manage archive settings for Monitoring and Compliance logs. | Data Admin, Platform Admin | DataSetup | | `LOGS.RESERVED-FIELDS:MANAGE` | Add, edit, or delete the schema's fields. | Data Admin, Observability Lead, Platform Admin | — | | `LOGS.RESERVED-FIELDS:READ` | Only view the fields of the schema. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | | `SPLIT-INDEX:MANAGE` | Apply split index on demand to apply reserved field changes. | Data Admin, Observability Lead, Platform Admin | — | [Metrics](https://coralogix.com/docs/user-guides/data_exploration/metric-explorer/) | Resource | Description | System roles | API presets | | ------------------------------------- | ------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------- | | `METRICS.DATA-ANALYTICS#HIGH:READ` | View metrics metadata under Metrics Usage. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | DataAnalytics | | `METRICS.DATA-API#HIGH:READDATA` | Query metrics. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying | | `METRICS.DATA-SETUP#LOW:READCONFIG` | View archive bucket settings. | Data Admin, Observability Lead, Platform Admin, Security User | DataSetup | | `METRICS.DATA-SETUP#LOW:UPDATECONFIG` | Manage archive bucket settings. | Data Admin, Platform Admin | DataSetup | | `STREAMING-AGGREGATIONS:READCONFIG` | View a list of streaming aggregation rules. | Data Admin, Observability Lead, Platform Admin, Read-Only User | — | | `STREAMING-AGGREGATIONS:UPDATECONFIG` | Add or delete streaming aggregation rules. | Data Admin, Observability Lead, Platform Admin | — | [Notifications](https://coralogix.com/docs/user-guides/alerting/configure-notifications/settings/) | Resource | Description | System roles | API presets | | --------------------------------------------- | ------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ------------------ | | `NOTIFICATION-CENTER-CONNECTORS:READCONFIG` | View the existing connectors in the notification center and their field data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter | | `NOTIFICATION-CENTER-CONNECTORS:READSUMMARY` | View the list of existing connectors in the notification center. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter | | `NOTIFICATION-CENTER-CONNECTORS:UPDATECONFIG` | Create and edit connectors in the notification center and their field data. | Data Admin, Observability Lead, Platform Admin | NotificationCenter | | `NOTIFICATION-CENTER-PRESETS:READCONFIG` | View the existing presets in the notification center and their field templates. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter | | `NOTIFICATION-CENTER-PRESETS:READSUMMARY` | View the list of existing presets in the notification center. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter | | `NOTIFICATION-CENTER-PRESETS:UPDATECONFIG` | Create and edit presets in the notification center and their field templates. | Data Admin, Observability Lead, Platform Admin | NotificationCenter | | `NOTIFICATION-CENTER-ROUTERS:READCONFIG` | View the existing routers in the notification center and their routing rules. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter | | `NOTIFICATION-CENTER-ROUTERS:READSUMMARY` | View the list of existing routers in the notification center. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter | | `NOTIFICATION-CENTER-ROUTERS:UPDATECONFIG` | Create and edit routers in the notification center and their routing rules. | Data Admin, Observability Lead, Platform Admin | NotificationCenter | | `NOTIFICATION-CENTER-SETTINGS:READCONFIG` | View team-level notification center settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter | | `NOTIFICATION-CENTER-SETTINGS:UPDATECONFIG` | Modify team-level notification center settings. | Data Admin, Observability Lead, Platform Admin, Security User | NotificationCenter | | `OUTBOUND-WEBHOOKS:READCONFIG` | View generic outbound webhooks configuration. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OutboundWebhooks | | `OUTBOUND-WEBHOOKS:READSUMMARY` | View all available outbound webhooks names. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OutboundWebhooks | | `OUTBOUND-WEBHOOKS:UPDATECONFIG` | Create and modify the outbound webhooks configuration. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | OutboundWebhooks | [Parsing Rules](https://coralogix.com/docs/user-guides/data-transformation/parsing/log-parsing-rules/) | Resource | Description | System roles | API presets | | ---------------------------- | ---------------------------------------- | ------------------------------------------------------------- | ------------ | | `PARSING-RULES:READCONFIG` | View parsing rules. | Data Admin, Observability Lead, Platform Admin, Security User | ParsingRules | | `PARSING-RULES:UPDATECONFIG` | Create, modify, or remove parsing rules. | Data Admin, Observability Lead, Platform Admin, Security User | ParsingRules | [Quota Rules](https://coralogix.com/docs/user-guides/account-management/payment-and-billing/quota-rules/) | Resource | Description | System roles | API presets | | ------------------------- | -------------------------------------------------------------- | ---------------------------------------------- | ----------- | | `TEAM-QUOTA-RULES:MANAGE` | Manage team quota rules. Allocate quota units per entity type. | Data Admin, Platform Admin | — | | `TEAM-QUOTA-RULES:READ` | View team quota rules. Allocate quota units per entity type. | Data Admin, Observability Lead, Platform Admin | — | [RUM](https://coralogix.com/docs/user-guides/rum/getting-started/real-user-monitoring/) | Resource | Description | System roles | API presets | | ------------------------------ | --------------------------------------------------- | ----------------------------------------------------------------------------- | ------------- | | `HIDE-ERRORS:READCONFIG` | View hidden errors in the UI. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — | | `HIDE-ERRORS:UPDATECONFIG` | Hide specific errors from the UI. | Data Admin, Observability Lead, Platform Admin, Standard User | — | | `RUM:VIEW` | View RUM. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — | | `RUM-SETTINGS:UPDATECONFIG` | Manage RUM settings. | Data Admin, Observability Lead, Platform Admin, Standard User | — | | `RUM-TEAM-SAVED-FILTER:READ` | View public saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — | | `RUM-TEAM-SAVED-FILTER:UPDATE` | Manage public saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Standard User | — | | `RUM-USER-SAVED-FILTER:READ` | View private saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — | | `RUM-USER-SAVED-FILTER:UPDATE` | Manage private saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Standard User | — | | `SESSION-RECORDING:READCONFIG` | Record user sessions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — | | `SOURCE-MAPPING:READMAPPING` | Read RUM source maps. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | SourceMapping | | `SOURCE-MAPPING:UPLOADMAPPING` | Upload RUM source maps. | Platform Admin | SourceMapping | [Recording Rules](https://coralogix.com/docs/user-guides/data-transformation/metric-rules/recording-rules/) | Resource | Description | System roles | API presets | | -------------------------------------- | ---------------------------------------------------------------------------------------- | ------------------------------------------------------------- | -------------- | | `LOGS.EVENTS2METRICS:READCONFIG` | View Events2Metrics configuration when the source input is logs. | Data Admin, Observability Lead, Platform Admin, Security User | Events2Metrics | | `LOGS.EVENTS2METRICS:UPDATECONFIG` | Configure or modify the configuration for Events2Metrics, when the source input is logs. | Data Admin, Observability Lead, Platform Admin, Security User | Events2Metrics | | `METRICS.RECORDING-RULES:READCONFIG` | View recording rules. | Data Admin, Observability Lead, Platform Admin, Security User | RecordingRules | | `METRICS.RECORDING-RULES:UPDATECONFIG` | Create, modify, or import recording rules. | Data Admin, Observability Lead, Platform Admin, Security User | RecordingRules | | `SPANS.EVENTS2METRICS:READCONFIG` | View Events2Metrics configuration when the source input is spans. | Data Admin, Observability Lead, Platform Admin | Events2Metrics | | `SPANS.EVENTS2METRICS:UPDATECONFIG` | Configure or modify the configuration for Event2Metrics, when the source input is spans. | Data Admin, Observability Lead, Platform Admin | Events2Metrics | [Schema Tracking and Management](https://coralogix.com/docs/user-guides/data-layer/schema-management/schema-explorer/) | Resource | Description | System roles | API presets | | -------------------------------- | ----------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `GLOBAL-MAPPING:READCONFIG` | View Label Mapping. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — | | `GLOBAL-MAPPING:UPDATECONFIG` | Manage Label Mapping. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-SCHEMA-MANAGER:MANAGE` | Allow users to edit, reserve, or map schema fields as needed. | Data Admin, Observability Lead, Platform Admin | — | | `TEAM-SCHEMA-MANAGER:READCONFIG` | Allow users to see field names, types, cardinality, popularity, and other schema-level metrics. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — | [Profiles](https://coralogix.com/docs/user-guides/continuous-profiling/introduction/) | Resource | Description | System roles | API presets | | ------------------------------- | ------------------------ | -------------------------------------------------------------------------------------------- | ------------- | | `PROFILES.CPU-PROFILES:READ` | View CPU profiling data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying | | `PROFILES.DEBUG-SYMBOLS:UPLOAD` | Upload debug symbols. | Data Admin, Platform Admin | SourceMapping | [SLO Management](https://coralogix.com/docs/user-guides/slos/introduction/) | Resource | Description | System roles | API presets | | ------------------ | -------------------- | -------------------------------------------------------------------------------------------- | ----------- | | `SLO:READCONFIG` | View SLO settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SLO | | `SLO:UPDATECONFIG` | Manage SLO settings. | Data Admin, Observability Lead, Platform Admin, Security User | SLO | [Snowbit](https://coralogix.com/docs/user-guides/security/cloud-security-posture-management/gcp-security-posture-management/) | Resource | Description | System roles | API presets | | ------------------------------------ | ---------------------------------------------------------------------- | -------------------------------------------- | ----------- | | `CLOUD-SECURITY:DEPLOY` | Deploy and undeploy Coralogix Cloud Security (STA). | Platform Admin, Security User | Security | | `CLOUD-SECURITY:READCONFIG` | View configuration for, and status of, Coralogix Cloud Security (STA). | Platform Admin, Security User | Security | | `SNOWBIT.ALERTS:CREATESECURITYALERT` | Create an STA Alert. | Platform Admin, Security User, Standard User | Security | | `SNOWBIT.ALERTS:READ` | View STA Alert settings. | Platform Admin, Security User, Standard User | Security | | `SNOWBIT.CSPM:READ` | View Cloud Posture Security Management data. | Platform Admin, Security User | Security | | `SNOWBIT.OVERVIEW:READ` | View Snowbit overview data. | Platform Admin, Security User | Security | | `SNOWBIT.RESOURCE-EXPLORER:READ` | View Snowbit Resource Explorer data. | Platform Admin, Security User | Security | | `SNOWBIT.SETUP:MANAGE` | View Snowbit SSPM data. | Platform Admin, Security User | Security | [Spans](https://coralogix.com/docs/dataprime/user-guide/foundations/understanding-spans/) | Resource | Description | System roles | API presets | | ------------------------------ | -------------------------------------- | ----------------------------------------------------------------------------- | ------------ | | `SPANS.DATA-API#HIGH:READDATA` | Query frequent-search spans. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | DataQuerying | | `SPANS.DATA-API#LOW:READDATA` | Query Monitoring and Compliance spans. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | DataQuerying | [Version Benchmarks](https://coralogix.com/docs/user-guides/monitoring-and-insights/version-benchmarks/) | Resource | Description | System roles | API presets | | ---------------------------------------------- | ------------------------------------------------ | ----------------------------------------------------------------------------- | --------------- | | `VERSION-BENCHMARK-TAGS:READ` | View Version Benchmark tags. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | CICDIntegration | | `VERSION-BENCHMARK-TAGS:UPDATE` | Modify Version Benchmark tags. | Data Admin, Observability Lead, Platform Admin, Standard User | CICDIntegration | | `VERSION-BENCHMARKS-REPORTS:READ` | View Version Benchmark reports. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | CICDIntegration | | `VERSION-BENCHMARKS-REPORTS:READTEAMWIDGETS` | View public Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — | | `VERSION-BENCHMARKS-REPORTS:READUSERWIDGETS` | View private Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — | | `VERSION-BENCHMARKS-REPORTS:UPDATETEAMWIDGETS` | Manage public Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Standard User | — | | `VERSION-BENCHMARKS-REPORTS:UPDATEUSERWIDGETS` | Manage private Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Standard User | — |