Permissions list
The following tables list all available role-based permissions in Coralogix.
For each permission, you can also see which system roles include it by default and which API presets it is part of (when applicable).
Common tasks and the permission they require
Admins frequently ask which permission unlocks a specific feature. The table below maps high-frequency tasks to the exact permission to grant the relevant role. Use the full reference list further down for everything else.
| Task | Required permission |
|---|---|
| View RUM Session Replay (record user sessions) | SESSION-RECORDING:READCONFIG |
| Create, rename, and delete Custom Dashboard folders | DASHBOARD-FOLDER:MANAGE |
| View the Data Usage page (Data Usage Metrics) | DATA-USAGE:READ |
| Save and manage public (team) shared views in Explore | TEAM-SAVED-VIEWS:UPDATE |
| Save and manage private shared views in Explore | USER-SAVED-VIEWS:UPDATE |
| Create, modify, and delete Send-Your-Data API keys | DATA-INGEST-API-KEYS:MANAGE |
Note
Permitted actions are independent: granting a MANAGE or UPDATE permission does not automatically grant the matching READ/READCONFIG. Assign both when a user needs to both view and manage a feature.
Organization Admin vs Team Admin
Coralogix scopes access at two different levels, which is why being an Organization Administrator does not, by itself, grant access inside a team.
-
Organization Administrator (Org Admin) is an organization-level role. The Org Admin manages the organization as a whole — connecting and disconnecting teams, granting Org Admin status to other users, moving quota between teams, and configuring organization settings such as allowed domains. The Org Admin is the only user who can access the Organization Settings. For details, see Create an organization.
-
Team administration is governed by team-scoped permissions, not by org-level status. Actions such as managing team members (
TEAM-MEMBERS:MANAGE), groups (TEAM-GROUPS:MANAGE), roles (TEAM-ROLES:MANAGE), and scopes (TEAM-SCOPES:MANAGE) belong to the TeamAdmin API keys preset and are included by default in the Platform Admin system role.
Because the two are scoped separately, Org Admin status does not automatically include team-scoped permissions. To administer a specific team, a user must hold a role within that team that includes the relevant team-level permissions (for example, the Platform Admin system role, or a custom role built on the TeamAdmin permissions above).
| Resource | Description | System roles | API presets |
|---|---|---|---|
TEAM-ACTIONS:EXECUTE | Execute shared actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions |
TEAM-ACTIONS:READCONFIG | View shared actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions |
TEAM-ACTIONS:UPDATECONFIG | Manage shared actions. | Data Admin, Observability Lead, Platform Admin, Security User | Actions |
USER-ACTIONS:EXECUTE | Create user actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions |
USER-ACTIONS:READCONFIG | View private actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions |
USER-ACTIONS:UPDATECONFIG | Manage private actions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Actions |
| Resource | Description | System roles | API presets |
|---|---|---|---|
ACCESS-POLICIES:READALL | View any access policy. | — | — |
ACCESS-POLICIES:UPDATEALL | Manage any access policy. | — | — |
DATA-INGEST-API-KEYS:MANAGE | Create, modify and delete send your data API keys. | Data Admin, Platform Admin | APIKeys |
DATA-INGEST-API-KEYS:READACCESSPOLICY | View send-your-data API key access policies. | — | — |
DATA-INGEST-API-KEYS:READCONFIG | View send your data API keys. | Data Admin, Observability Lead, Platform Admin | APIKeys |
DATA-INGEST-API-KEYS:UPDATEACCESSPOLICY | Create, modify, and delete send-your-data API key access policies. | — | — |
OAUTH-CLIENT:CREATEDELEGATEDACCESS | Create delegated access for an OAuth2 client. | — | — |
OAUTH-CLIENT:MANAGE | Create, update, and delete OAuth2 clients. | Platform Admin | — |
OAUTH-CLIENT:READ | View OAuth2 clients. | Platform Admin | — |
PERSONAL-API-KEYS-REGISTRY:MANAGE | Lifecycle actions across users personal API keys. | Platform Admin | — |
PERSONAL-API-KEYS-REGISTRY:READ | List/view personal API keys metadata across users. | Platform Admin | — |
PERSONAL-CUSTOM-API-KEYS:MANAGE | Create, modify and delete personal API keys. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | APIKeys |
PERSONAL-CUSTOM-API-KEYS:READCONFIG | View personal API keys. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | APIKeys |
SECURE-LOGIN:MANAGE | Configure SSO, MFA/2FA enforcement, and other login-related security policies. | Platform Admin | — |
SECURE-LOGIN:VIEW | View SSO, MFA/2FA enforcement, and other login-related security policies. | Platform Admin | — |
TEAM:MANAGECONNECTIONTOORG | Connect to or disconnect from an organization. | Platform Admin | — |
TEAM-AI-SETTINGS:MANAGE | Allow users to manage the AI team settings and the individual toggle state for each AI feature. | Platform Admin | — |
TEAM-AI-SETTINGS:READCONFIG | Allow users to view the AI team settings and the individual toggle state for each AI feature. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-API-KEYS-SECURITY-SETTINGS:MANAGE | Manage security settings for API keys. | Data Admin, Platform Admin | — |
TEAM-API-KEYS-SECURITY-SETTINGS:READCONFIG | View security settings for API keys. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-CUSTOM-API-KEYS:MANAGE | Create, modify and delete team level API keys. | Platform Admin | APIKeys |
TEAM-CUSTOM-API-KEYS:READACCESSPOLICY | View team level API key access policies. | — | — |
TEAM-CUSTOM-API-KEYS:READCONFIG | View team level API keys. | Platform Admin | APIKeys |
TEAM-CUSTOM-API-KEYS:UPDATEACCESSPOLICY | Update team level API key access policies. | — | — |
TEAM-DOMAIN:MANAGE | Create and modify your team's domain. | Platform Admin | TeamAdmin |
TEAM-DOMAIN:READCONFIG | View your team's domain. | Platform Admin | TeamAdmin |
TEAM-GROUPS:MANAGE | Create a group and control user membership and permissions. | Platform Admin | TeamAdmin |
TEAM-GROUPS:READCONFIG | View groups, membership, and permissions. | Platform Admin | TeamAdmin |
TEAM-IP-ACCESS:MANAGE | Configure and modify your team's IP access. | Platform Admin | TeamAdmin |
TEAM-IP-ACCESS:READCONFIG | View your team's IP access. | Platform Admin | TeamAdmin |
TEAM-LANDING-PAGE:MANAGE | Define the default homepage for a whole team. | Platform Admin | TeamAdmin |
TEAM-LANDING-PAGE:READCONFIG | View the default homepage for a whole team. | Platform Admin | TeamAdmin |
TEAM-MEMBERS:MANAGE | Control team membership by viewing, adding, and removing members. | Platform Admin | TeamAdmin |
TEAM-MEMBERS:READCONFIG | View your team members. | Platform Admin | TeamAdmin |
TEAM-QUOTA:MANAGE | Manage team quotas. Move quotas between 2 or more teams for which you have manage permissions. | Platform Admin | — |
TEAM-QUOTA:READ | View your team's quota. | Platform Admin | — |
TEAM-ROLES:MANAGE | Create, delete, rename, and edit roles for your teams. To control team membership across all teams, use the Manage Team Membership permission. | Platform Admin | TeamAdmin |
TEAM-ROLES:READCONFIG | View roles for your team. | Platform Admin | TeamAdmin |
TEAM-ROLES:READSUMMARY | Read groups summary. | — | — |
TEAM-ROLES:READTEAMMEMBERSSUMMARY | Read team members summary. | — | — |
TEAM-SCIM:MANAGE | Configure and modify your team's SCIM. | Platform Admin | TeamAdmin |
TEAM-SCIM:READCONFIG | View your team's SCIM. | Platform Admin | TeamAdmin |
TEAM-SCOPES:MANAGE | Create, delete, rename, and edit scopes for your teams. | Platform Admin | TeamAdmin |
TEAM-SCOPES:READCONFIG | View scopes for your team. | Platform Admin | TeamAdmin |
TEAM-SESSIONS:MANAGE | Define the duration of idle sessions for all users in the team. Enabling this option will end all current login sessions and require users to log in again. | Platform Admin | TeamAdmin |
TEAM-SESSIONS:READCONFIG | View the duration of idle sessions for all users in the team. | Platform Admin | TeamAdmin |
TEAM-SLACK-NOTIFICATIONS:READCONFIG | View team notifications on Slack. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-SLACK-NOTIFICATIONS:UPDATECONFIG | Create and manage team notifications on Slack. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-SSO:MANAGE | Configure and modify your team's SSO. | Platform Admin | TeamAdmin |
TEAM-SSO:READCONFIG | View your team's SSO. | Platform Admin | TeamAdmin |
USER-AUTH-INFO:READGROUPS | Allows each user to view their group membership. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
USER-EMAIL-NOTIFICATIONS:GETDAILYEMAILS | Manage the daily auto-generated report that summarizes errors and critical logs in your system. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
USER-EMAIL-NOTIFICATIONS:GETDATAUSAGEWARNINGS | Manage notifications regarding your team quota limit. | Data Admin, Platform Admin | — |
USER-EMAIL-NOTIFICATIONS:GETFLOWANOMALIES | Manage flow anomaly notifications. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
USER-EMAIL-NOTIFICATIONS:GETSPIKEANOMALIES | Manage spike anomaly notifications. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
USER-SETTINGS:READCONFIG | View the user's personal settings, such as the date format and the timezone. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
USER-SETTINGS:UPDATECONFIG | Edit the user's personal settings, such as the date format and the timezone. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
AI-APP-CATALOG:READ | View Application Catalog. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
AI-APP-DISCOVERY:MANAGE | Activate AI App Discovery and rescan to detect new AI apps. | Data Admin, Observability Lead, Platform Admin | AiObservability |
AI-APP-DISCOVERY:READ | View AI App Discovery. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
AI-APP-EVALUATORS:MANAGE | Add, edit, and delete evals for an application. | Data Admin, Observability Lead, Platform Admin | AiObservability |
AI-APP-EVALUATORS:READ | View Application Eval Catalog. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
AI-CODE-AGENTS:MANAGE | Manage Code agents dashboards | Data Admin, Platform Admin | AiObservability |
AI-CODE-AGENTS:READ | View Code Agents dashboards. | Data Admin, Platform Admin | AiObservability |
AI-GUARDRAILS:MANAGE | Add, edit, and delete AI Guardrails. | Data Admin, Observability Lead, Platform Admin | AiObservability |
AI-OVERVIEW:READ | View AI Overview. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
AI-SPM:READ | View AI Security Posture Management. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | AiObservability |
OLLY:SENDMESSAGE | Send messages to Olly and receive responses. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Olly |
OLLY-AUTOMATIONS:MANAGE | Manage Olly automatic triggering for cases and other automated flows. | Data Admin, Observability Lead, Platform Admin | — |
OLLY-TEAM-RULES:MANAGE | Add, edit, enable or disable, and delete Olly team rules. | Data Admin, Observability Lead, Platform Admin | Olly |
OLLY-TEAM-RULES:READ | View Olly team rules. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Olly |
OLLY-TEAM-SKILLS:MANAGE | Add, edit, and delete Olly team Skills. | Data Admin, Observability Lead, Platform Admin | — |
OLLY-TEAM-SKILLS:VIEW | View Olly team skills. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
OLLY-USAGE:MANAGE | Manage unit allocation and limit usage for specific users and API keys. | Data Admin, Observability Lead, Platform Admin | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
ALERTS:LOGSREADCONFIG | View log-based alert settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts |
ALERTS:LOGSUPDATECONFIG | Manage log-based alert settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts |
ALERTS:MAPREAD | View visualized alerts in the Alert Map. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts |
ALERTS:METRICSREADCONFIG | View metric alert configuration. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts |
ALERTS:METRICSUPDATECONFIG | Define and modify settings for metric alerts. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts |
ALERTS:READACCESSPOLICY | Allow users to view defined access policies on their entity | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
ALERTS:READCONFIG | View Flow alert settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts |
ALERTS:SLOMGMTREADCONFIG | View SLO-based alert settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SLO |
ALERTS:SLOMGMTUPDATECONFIG | Configure SLO-based alert settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | SLO |
ALERTS:SNOOZE | Snooze or unsnooze an Alert. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts |
ALERTS:SPANSREADCONFIG | View Trace Alerts settings. | Data Admin, Observability Lead, Platform Admin, Standard User | Alerts |
ALERTS:SPANSUPDATECONFIG | Manage Trace Alerts settings. | Data Admin, Observability Lead, Platform Admin, Standard User | Alerts |
ALERTS:UPDATEACCESSPOLICY | Allow users to define access policies on their entity | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
ALERTS:UPDATECONFIG | Manage Flow alert settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts |
ALERTS-SAVED-VIEWS:MANAGE | Manage saved views in Alerts. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | SavedViews |
ALERTS-SAVED-VIEWS:READ | View saved views in Alerts. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | SavedViews |
ALERTS-SAVED-VIEWS:READACCESSPOLICY | View access policies for Alerts saved views. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews |
ALERTS-SAVED-VIEWS:UPDATEACCESSPOLICY | Manage access policies for Alerts saved views. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews |
ALERTS-TEAM-DEFAULT-VIEWS:MANAGE | Define the team-level default view in Alert Management settings. | Platform Admin | SavedViews |
ALERTS-TEAM-DEFAULT-VIEWS:READ | View the team-level default view in Alert Management settings. | Platform Admin | SavedViews |
SUPPRESSION-RULES:READCONFIG | Read Suppression-Rules settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Alerts |
SUPPRESSION-RULES:UPDATECONFIG | Manage Suppression-Rules settings. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Alerts |
TEAM-ALERTS-SETTINGS:MANAGE | Manage state of the toggle settings. | Data Admin, Observability Lead, Platform Admin | Alerts |
TEAM-ALERTS-SETTINGS:READCONFIG | View the toggle in Settings. | Data Admin, Observability Lead, Platform Admin | Alerts |
| Resource | Description | System roles | API presets |
|---|---|---|---|
APM-SAVED-VIEWS:MANAGE | Manage saved views in APM. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
APM-SAVED-VIEWS:READ | View saved views in APM. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
APM-SAVED-VIEWS:READACCESSPOLICY | View access policies defined on APM saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — |
APM-SAVED-VIEWS:UPDATEACCESSPOLICY | Define access policies on APM saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — |
APM-TEAM-DEFAULT-VIEWS:MANAGE | Define team-level default views for APM. | Platform Admin | — |
APM-TEAM-DEFAULT-VIEWS:READ | View team-level default views in APM settings. | Platform Admin | — |
SERVERLESS:READ | View Serverless Monitoring data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM |
SERVICE-CATALOG:READ | View Service Catalog data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM |
SERVICE-CATALOG:UPDATE | Manage Service Catalog services. | Data Admin, Observability Lead, Platform Admin | APM |
SERVICE-CATALOG:UPDATEAPDEXCONFIG | Manage the Apdex configuration. | Data Admin, Observability Lead, Platform Admin | APM |
SERVICE-CATALOG:UPDATEDIMENSIONSCONFIG | Manage Service Catalog dimensions. | Data Admin, Observability Lead, Platform Admin | APM |
SERVICE-CATALOG:UPDATESLICONFIG | Manage Service Catalog SLIs. | Data Admin, Observability Lead, Platform Admin | APM |
SERVICE-MAP:READ | View Service Map. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | APM |
| Resource | Description | System roles | API presets |
|---|---|---|---|
TEAM-AUDITING:READCONFIG | View team audit settings. | Data Admin, Platform Admin | Auditing |
TEAM-AUDITING:UPDATECONFIG | Manage your team audit settings. | Data Admin, Platform Admin | Auditing |
| Resource | Description | System roles | API presets |
|---|---|---|---|
CASE-CONFIG:READ | View Suppression window and Snooze period settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
CASE-CONFIG:UPDATE | Modify Suppression window and Snooze period settings. | Data Admin, Observability Lead, Platform Admin | — |
CASES:ACKNOWLEDGE | Allow user to acknowledge a case | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
CASES:ASSIGN | Allow user to assign a case to themself or to someone else | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
CASES:CLOSE | Allow user to close a case | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
CASES:COMMENT | Allow user to comment on a case | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
CASES:CREATE | Allow creating cases | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Cases |
CASES:READ | Allow user to see the list of cases and individual cases | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
CASES:UPDATE | Allow user to update case | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
CASES-SAVED-VIEWS:MANAGE | Manage saved views in Cases. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews |
CASES-SAVED-VIEWS:READ | View saved views in Cases. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews |
CASES-SAVED-VIEWS:READACCESSPOLICY | View access policies for Cases saved views. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews |
CASES-SAVED-VIEWS:UPDATEACCESSPOLICY | Manage access policies for Cases saved views. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews |
CASES-TEAM-DEFAULT-VIEWS:MANAGE | Define the team-level default view in Cases settings. | Platform Admin | SavedViews |
CASES-TEAM-DEFAULT-VIEWS:READ | View the team-level default view in Cases settings. | Platform Admin | SavedViews |
| Resource | Description | System roles | API presets |
|---|---|---|---|
LEGACY-ARCHIVE-QUERIES:EXECUTE | Query data from the S3 archive. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
LEGACY-ARCHIVE-QUERIES:REINDEX | Reindex archive queries. | Data Admin, Platform Admin | — |
TEAM-SAVED-VIEWS:READ | View public shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews |
TEAM-SAVED-VIEWS:READACCESSPOLICY | View access policies for public shared views. | — | — |
TEAM-SAVED-VIEWS:UPDATE | Manage public shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Security User | SavedViews |
TEAM-SAVED-VIEWS:UPDATEACCESSPOLICY | Manage access policies for public shared views. | — | — |
USER-SAVED-VIEWS:READ | View private shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews |
USER-SAVED-VIEWS:UPDATE | Manage private shared views in the Explore Screen. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SavedViews |
| Resource | Description | System roles | API presets |
|---|---|---|---|
DASHBOARD-FOLDER:MANAGE | Create, rename, and delete Custom Dashboard folders. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
DASHBOARD-FOLDER:VIEW | View Custom Dashboard folders. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
HOME-DASHBOARD:READTEAMWIDGETS | View public Home Dashboard widgets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
HOME-DASHBOARD:READUSERWIDGETS | View private Home Dashboard widgets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
HOME-DASHBOARD:UPDATETEAMWIDGETS | Manage public Home Dashboard widgets. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
HOME-DASHBOARD:UPDATEUSERWIDGETS | View private Home Dashboard widgets. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
TEAM-DASHBOARDS:READ | View public Custom Dashboard. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Dashboards |
TEAM-DASHBOARDS:READACCESSPOLICY | View public Custom Dashboard access policies. | Data Admin, Observability Lead, Platform Admin, Security User | — |
TEAM-DASHBOARDS:UPDATE | Manage public Custom Dashboard. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Dashboards |
TEAM-DASHBOARDS:UPDATEACCESSPOLICY | Manage public Custom Dashboard access policies. | Data Admin, Observability Lead, Platform Admin, Security User | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
PIPELINE-ANALYZER:READ | Inspect the exact rules applied to each log. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
SYSTEM-DATASETS:APPENDDATA | Allow users to add new data to datasets. | Data Admin, Observability Lead, Platform Admin, Security User | — |
SYSTEM-DATASETS:MANAGE | Manage system datasets. | Data Admin, Platform Admin | — |
SYSTEM-DATASETS:OVERWRITEDATA | Allow users to replace existing dataset content. | Data Admin, Observability Lead, Platform Admin | — |
SYSTEM-DATASETS:READACCESSPOLICY | Allow users to read access policy for a specific datasets. | Data Admin, Observability Lead, Platform Admin | — |
SYSTEM-DATASETS:READCONFIG | View system datasets. | Data Admin, Observability Lead, Platform Admin | — |
SYSTEM-DATASETS:READDATA | Allow users to read data from datasets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
SYSTEM-DATASETS:UPDATEACCESSPOLICY | Allow users to update access policy for a specific datasets. | Platform Admin | — |
TEAM-DATASET-RULES:MANAGE | Create, update, and delete team dataset rules. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-DATASET-RULES:READCONFIG | View team dataset rules. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-DATASETS:APPENDDATA | Allow users to add new data to datasets. | Data Admin, Observability Lead, Platform Admin, Security User | — |
TEAM-DATASETS:CREATE | Create a dataset. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-DATASETS:DELETE | Delete a dataset. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-DATASETS:OVERWRITEDATA | Allow users to replace existing dataset content. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-DATASETS:READACCESSPOLICY | Allow users to read access policy for a specific datasets. | Data Admin, Platform Admin | — |
TEAM-DATASETS:READDATA | Allow users to read data from datasets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
TEAM-DATASETS:RENAME | Rename a dataset. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-DATASETS:UPDATEACCESSPOLICY | Allow users to update access policy for a specific datasets. | Data Admin, Platform Admin | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
DATA-USAGE:MANAGE | Enable and disable Data Usage Metrics. | Data Admin, Platform Admin | DataUsage |
DATA-USAGE:READ | View Data Usage Metrics. | Data Admin, Platform Admin | DataUsage |
LOGS.TCO:READPOLICIES | View existing log TCO policies. | Data Admin, Observability Lead, Platform Admin, Security User | TCOPolicies |
LOGS.TCO:UPDATEPOLICIES | View and modify existing log TCO policies and create new ones. | Data Admin, Platform Admin | TCOPolicies |
METRICS.TCO:READPOLICIES | View metrics TCO policies. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | TCOPolicies |
METRICS.TCO:UPDATEPOLICIES | Manage metrics TCO policies. | Data Admin, Observability Lead, Platform Admin | TCOPolicies |
SPANS.TCO:READPOLICIES | View existing tracing TCO policies. | Data Admin, Observability Lead, Platform Admin | TCOPolicies |
SPANS.TCO:UPDATEPOLICIES | View and modify existing tracing TCO policies and create new ones. | Data Admin, Platform Admin | TCOPolicies |
TEAM-PAY-AS-YOU-GO:READCONFIG | View Pay-As-You-Go settings. | Data Admin, Platform Admin | Payments |
TEAM-PAY-AS-YOU-GO:UPDATECONFIG | Manage Pay-As-You-Go settings. | Platform Admin | Payments |
TEAM-PAYMENTS:READCONFIG | View your team's account and payment method. | Data Admin, Platform Admin | Payments |
TEAM-PAYMENTS:UPDATECONFIG | Manage your team's account and payment method. | Platform Admin | Payments |
| Resource | Description | System roles | API presets |
|---|---|---|---|
DATA-MAP:READMAPS | View DataMap configurations. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataMap |
DATA-MAP:UPDATEMAPS | Configure DataMap. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | DataMap |
| Resource | Description | System roles | API presets |
|---|---|---|---|
CLOUD-METADATA-ENRICHMENT:READCONFIG | View AWS Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments |
CLOUD-METADATA-ENRICHMENT:UPDATECONFIG | Manage AWS Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments |
GEO-ENRICHMENT:READCONFIG | View Geo Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments |
GEO-ENRICHMENT:UPDATECONFIG | Manage Geo Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments |
SECURITY-ENRICHMENT:READCONFIG | View the Unified Threat Intelligence Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments |
SECURITY-ENRICHMENT:UPDATECONFIG | Manage the Unified Threat Intelligence Enrichment configuration. | Data Admin, Platform Admin, Security User | Enrichments |
TEAM-CUSTOM-ENRICHMENT:READCONFIG | View the Custom Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments |
TEAM-CUSTOM-ENRICHMENT:READDATA | View the Custom Enrichment data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Enrichments |
TEAM-CUSTOM-ENRICHMENT:UPDATECONFIG | Manage the Custom Enrichment configuration. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments |
TEAM-CUSTOM-ENRICHMENT:UPDATEDATA | Manage data for Custom Enrichment ingestion. | Data Admin, Observability Lead, Platform Admin, Security User | Enrichments |
| Resource | Description | System roles | API presets |
|---|---|---|---|
EXPLORE-SAVED-VIEWS:MANAGE | Manage saved views. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
EXPLORE-SAVED-VIEWS:READ | View saved views. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
EXPLORE-SAVED-VIEWS:READACCESSPOLICY | View the access policy for saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — |
EXPLORE-SAVED-VIEWS:UPDATEACCESSPOLICY | Manage the access policy for saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — |
EXPLORE-TEAM-DEFAULT-VIEWS:MANAGE | Manage the team default view in Explore. | Platform Admin | — |
EXPLORE-TEAM-DEFAULT-VIEWS:READ | View the team default view in Explore. | Platform Admin | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
REMOTE-CONFIGURATION:MANAGE | Allow admins to manage remote configurations. | Data Admin, Platform Admin | FleetManagement |
| Resource | Description | System roles | API presets |
|---|---|---|---|
GRAFANA:READ | View Grafana Dashboards. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Grafana |
GRAFANA:UPDATE | Create, modify, and remove Grafana Dashboards. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Grafana |
OPENSEARCH-DASHBOARDS:READ | View OpenSearch dashboards. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OpenSearchDashboards |
OPENSEARCH-DASHBOARDS:UPDATE | Create, modify, and remove OpenSearch dashboards. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | OpenSearchDashboards |
| Resource | Description | System roles | API presets |
|---|---|---|---|
INCIDENTS:ACKNOWLEDGE | Acknowledge events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | Incidents |
INCIDENTS:ASSIGN | Assign an event in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User | Incidents |
INCIDENTS:CLOSE | Manually resolve events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User | Incidents |
INCIDENTS:READ | View events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | Incidents |
INCIDENTS:SNOOZE | Snooze events in triggered alerts. | Data Admin, Observability Lead, Platform Admin, Security User | Incidents |
| Resource | Description | System roles | API presets |
|---|---|---|---|
INFRA-SAVED-VIEWS:MANAGE | Create, edit, and delete saved views in Infra Explorer. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
INFRA-SAVED-VIEWS:READ | View saved views. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
INFRA-SAVED-VIEWS:READACCESSPOLICY | View access policies defined on saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — |
INFRA-SAVED-VIEWS:UPDATEACCESSPOLICY | Manage access policies on Infra Explorer saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — |
INFRA-TEAM-DEFAULT-VIEWS:MANAGE | Define team-level default views in Infra Monitoring settings. | Platform Admin | — |
INFRA-TEAM-DEFAULT-VIEWS:READ | View team-level default views. | Platform Admin | — |
INFRASTRUCTURE-EXPLORER:READ | View the Infra Explorer resource catalog. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
INFRASTRUCTURE-HEALTH-RULES:MANAGE | Create, edit, enable, disable, duplicate, and delete health rules, and manage policies on each resource. | Data Admin, Observability Lead, Platform Admin, Standard User | — |
INFRASTRUCTURE-HEALTH-RULES:READ | View configured health rules. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
INFRASTRUCTURE-MONITORING-DATA:MANAGE | Enable or disable Infrastructure Monitoring diagnostic logs. | Data Admin, Observability Lead, Platform Admin, Standard User | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
CONTEXTUAL-DATA:READCONFIG | View configurations for Native Integrations (Contextual Data). | Data Admin, Observability Lead, Platform Admin, Security User | ContextualData |
CONTEXTUAL-DATA:UPDATECONFIG | Manage configurations for Native Integrations (Contextual Data). | Data Admin, Platform Admin | ContextualData |
EXTENSIONS:DEPLOY | Deploy, undeploy, and update extension packages. | Data Admin, Platform Admin, Security User | Extensions |
EXTENSIONS:READCONFIG | View extension packages. | Data Admin, Observability Lead, Platform Admin, Security User | Extensions |
EXTENSIONS:UPDATECONFIG | Add, update, or delete extension packages. | Data Admin, Platform Admin | Extensions |
INTEGRATIONS:DEPLOY | Deploy, undeploy, and update integrations. | Data Admin, Platform Admin | Integrations |
INTEGRATIONS:READCONFIG | View deployed integration packages. | Data Admin, Observability Lead, Platform Admin, Security User | Integrations |
| Resource | Description | System roles | API presets |
|---|---|---|---|
INVESTIGATIONS:READ | View investigations to which you've been invited or are public. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
INVESTIGATIONS:READALL | View all private and public investigations without invitation. | Observability Lead, Platform Admin, Security User | — |
INVESTIGATIONS:UPDATE | Create and update investigations to which you've been invited or are public. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
INVESTIGATIONS:UPDATEALL | Create investigations and update all private and public investigations without invitation. | Observability Lead, Platform Admin, Security User | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
LIVETAIL:READ | View LiveTail data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | LiveTail |
| Resource | Description | System roles | API presets |
|---|---|---|---|
LOGS.DATA-ANALYTICS#HIGH:READ | View metadata for frequent-search logs in the form of mapping statistics. | Data Admin, Platform Admin | DataAnalytics |
LOGS.DATA-API#HIGH:READDATA | Query frequent-search logs. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
LOGS.DATA-API#LOW:READDATA | Query Monitoring and Compliance logs. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
LOGS.DATA-SETUP#LOW:READCONFIG | View archive settings for Monitoring and Compliance logs. | Data Admin, Observability Lead, Platform Admin, Security User | DataSetup |
LOGS.DATA-SETUP#LOW:UPDATECONFIG | Manage archive settings for Monitoring and Compliance logs. | Data Admin, Platform Admin | DataSetup |
LOGS.RESERVED-FIELDS:MANAGE | Add, edit, or delete the schema's fields. | Data Admin, Observability Lead, Platform Admin | — |
LOGS.RESERVED-FIELDS:READ | Only view the fields of the schema. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
SPLIT-INDEX:MANAGE | Apply split index on demand to apply reserved field changes. | Data Admin, Observability Lead, Platform Admin | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
METRICS.DATA-ANALYTICS#HIGH:READ | View metrics metadata under Metrics Usage. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | DataAnalytics |
METRICS.DATA-API#HIGH:READDATA | Query metrics. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
METRICS.DATA-SETUP#LOW:READCONFIG | View archive bucket settings. | Data Admin, Observability Lead, Platform Admin, Security User | DataSetup |
METRICS.DATA-SETUP#LOW:UPDATECONFIG | Manage archive bucket settings. | Data Admin, Platform Admin | DataSetup |
STREAMING-AGGREGATIONS:READCONFIG | View a list of streaming aggregation rules. | Data Admin, Observability Lead, Platform Admin, Read-Only User | — |
STREAMING-AGGREGATIONS:UPDATECONFIG | Add or delete streaming aggregation rules. | Data Admin, Observability Lead, Platform Admin | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
NOTIFICATION-CENTER-CONNECTORS:READCONFIG | View the existing connectors in the notification center and their field data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
NOTIFICATION-CENTER-CONNECTORS:READSUMMARY | View the list of existing connectors in the notification center. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
NOTIFICATION-CENTER-CONNECTORS:UPDATECONFIG | Create and edit connectors in the notification center and their field data. | Data Admin, Observability Lead, Platform Admin | NotificationCenter |
NOTIFICATION-CENTER-PRESETS:READCONFIG | View the existing presets in the notification center and their field templates. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
NOTIFICATION-CENTER-PRESETS:READSUMMARY | View the list of existing presets in the notification center. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
NOTIFICATION-CENTER-PRESETS:UPDATECONFIG | Create and edit presets in the notification center and their field templates. | Data Admin, Observability Lead, Platform Admin | NotificationCenter |
NOTIFICATION-CENTER-ROUTERS:READCONFIG | View the existing routers in the notification center and their routing rules. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
NOTIFICATION-CENTER-ROUTERS:READSUMMARY | View the list of existing routers in the notification center. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
NOTIFICATION-CENTER-ROUTERS:UPDATECONFIG | Create and edit routers in the notification center and their routing rules. | Data Admin, Observability Lead, Platform Admin | NotificationCenter |
NOTIFICATION-CENTER-SETTINGS:READCONFIG | View team-level notification center settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | NotificationCenter |
NOTIFICATION-CENTER-SETTINGS:UPDATECONFIG | Modify team-level notification center settings. | Data Admin, Observability Lead, Platform Admin, Security User | NotificationCenter |
OUTBOUND-WEBHOOKS:READCONFIG | View generic outbound webhooks configuration. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OutboundWebhooks |
OUTBOUND-WEBHOOKS:READSUMMARY | View all available outbound webhooks names. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | OutboundWebhooks |
OUTBOUND-WEBHOOKS:UPDATECONFIG | Create and modify the outbound webhooks configuration. | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | OutboundWebhooks |
| Resource | Description | System roles | API presets |
|---|---|---|---|
OPS-EVENTS:APPENDDATA | Allows sending event data (deployment events, CI/CD events, marketing events, etc.) to Coralogix | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
PARSING-RULES:READCONFIG | View parsing rules. | Data Admin, Observability Lead, Platform Admin, Security User | ParsingRules |
PARSING-RULES:UPDATECONFIG | Create, modify, or remove parsing rules. | Data Admin, Observability Lead, Platform Admin, Security User | ParsingRules |
Product Analytics
| Resource | Description | System roles | API presets |
|---|---|---|---|
PRODUCT-ANALYTICS:MANAGE | Allow the user to manage product analytics information | Data Admin, Observability Lead, Platform Admin, Security User, Standard User | — |
PRODUCT-ANALYTICS:READ | Allow the user to access product analytics information | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
TEAM-QUOTA-RULES:MANAGE | Manage team quota rules. Allocate quota units per entity type. | Data Admin, Platform Admin | — |
TEAM-QUOTA-RULES:READ | View team quota rules. Allocate quota units per entity type. | Data Admin, Observability Lead, Platform Admin | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
HIDE-ERRORS:READCONFIG | View hidden errors in the UI. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — |
HIDE-ERRORS:UPDATECONFIG | Hide specific errors from the UI. | Data Admin, Observability Lead, Platform Admin, Standard User | — |
RUM:VIEW | View RUM. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — |
RUM-SAVED-VIEWS:MANAGE | Create, edit, and delete RUM saved views. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
RUM-SAVED-VIEWS:READ | View saved views in Real User Monitoring. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
RUM-SAVED-VIEWS:READACCESSPOLICY | View access policies defined on RUM saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — |
RUM-SAVED-VIEWS:UPDATEACCESSPOLICY | Define access policies on RUM saved views. | Data Admin, Observability Lead, Platform Admin, Security User | — |
RUM-SETTINGS:UPDATECONFIG | Manage RUM settings. | Data Admin, Observability Lead, Platform Admin, Standard User | — |
RUM-TEAM-DEFAULT-VIEWS:MANAGE | Define team-level default views in RUM settings. | Platform Admin | — |
RUM-TEAM-DEFAULT-VIEWS:READ | View team-level default views in RUM. | Platform Admin | — |
RUM-TEAM-SAVED-FILTER:READ | View public saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — |
RUM-TEAM-SAVED-FILTER:UPDATE | Manage public saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Standard User | — |
RUM-USER-SAVED-FILTER:READ | View private saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — |
RUM-USER-SAVED-FILTER:UPDATE | Manage private saved filters in your RUM dashboard. | Data Admin, Observability Lead, Platform Admin, Standard User | — |
SESSION-RECORDING:READCONFIG | Record user sessions. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — |
SOURCE-MAPPING:READMAPPING | Read RUM source maps. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | SourceMapping |
SOURCE-MAPPING:UPLOADMAPPING | Upload RUM source maps. | Platform Admin | SourceMapping |
| Resource | Description | System roles | API presets |
|---|---|---|---|
LOGS.EVENTS2METRICS:READCONFIG | View Events2Metrics configuration when the source input is logs. | Data Admin, Observability Lead, Platform Admin, Security User | Events2Metrics |
LOGS.EVENTS2METRICS:UPDATECONFIG | Configure or modify the configuration for Events2Metrics, when the source input is logs. | Data Admin, Observability Lead, Platform Admin, Security User | Events2Metrics |
METRICS.RECORDING-RULES:READCONFIG | View recording rules. | Data Admin, Observability Lead, Platform Admin, Security User | RecordingRules |
METRICS.RECORDING-RULES:UPDATECONFIG | Create, modify, or import recording rules. | Data Admin, Observability Lead, Platform Admin, Security User | RecordingRules |
SPANS.EVENTS2METRICS:READCONFIG | View Events2Metrics configuration when the source input is spans. | Data Admin, Observability Lead, Platform Admin | Events2Metrics |
SPANS.EVENTS2METRICS:UPDATECONFIG | Configure or modify the configuration for Event2Metrics, when the source input is spans. | Data Admin, Observability Lead, Platform Admin | Events2Metrics |
| Resource | Description | System roles | API presets |
|---|---|---|---|
GLOBAL-MAPPING:READCONFIG | View Label Mapping. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — |
GLOBAL-MAPPING:UPDATECONFIG | Manage Label Mapping. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-SCHEMA-MANAGER:MANAGE | Allow users to edit, reserve, or map schema fields as needed. | Data Admin, Observability Lead, Platform Admin | — |
TEAM-SCHEMA-MANAGER:READCONFIG | Allow users to see field names, types, cardinality, popularity, and other schema-level metrics. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | — |
| Resource | Description | System roles | API presets |
|---|---|---|---|
PROFILES.CPU-PROFILES:READ | View CPU profiling data. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | DataQuerying |
PROFILES.DEBUG-SYMBOLS:UPLOAD | Upload debug symbols. | Data Admin, Platform Admin | SourceMapping |
| Resource | Description | System roles | API presets |
|---|---|---|---|
SLO:READCONFIG | View SLO settings. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User | SLO |
SLO:UPDATECONFIG | Manage SLO settings. | Data Admin, Observability Lead, Platform Admin, Security User | SLO |
| Resource | Description | System roles | API presets |
|---|---|---|---|
ALERTS:SNOWBITCREATESECURITYALERT | Create a security traffic analysis alert. | Platform Admin, Security User, Standard User | Security |
ALERTS:SNOWBITREAD | View STA alert settings. | Platform Admin, Security User, Standard User | Security |
CLOUD-SECURITY:DEPLOY | Deploy and undeploy Coralogix Cloud Security (STA). | Platform Admin, Security User | Security |
CLOUD-SECURITY:READCONFIG | View configuration for, and status of, Coralogix Cloud Security (STA). | Platform Admin, Security User | Security |
SNOWBIT.CSPM:READ | View Cloud Posture Security Management data. | Platform Admin, Security User | Security |
SNOWBIT.OVERVIEW:READ | View Snowbit overview data. | Platform Admin, Security User | Security |
SNOWBIT.RESOURCE-EXPLORER:READ | View Snowbit Resource Explorer data. | Platform Admin, Security User | Security |
SNOWBIT.SETUP:MANAGE | View Snowbit SSPM data. | Platform Admin, Security User | Security |
| Resource | Description | System roles | API presets |
|---|---|---|---|
SPANS.DATA-API#HIGH:READDATA | Query frequent-search spans. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | DataQuerying |
SPANS.DATA-API#LOW:READDATA | Query Monitoring and Compliance spans. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | DataQuerying |
| Resource | Description | System roles | API presets |
|---|---|---|---|
VERSION-BENCHMARK-TAGS:READ | View Version Benchmark tags. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | CICDIntegration |
VERSION-BENCHMARK-TAGS:UPDATE | Modify Version Benchmark tags. | Data Admin, Observability Lead, Platform Admin, Standard User | CICDIntegration |
VERSION-BENCHMARKS-REPORTS:READ | View Version Benchmark reports. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | CICDIntegration |
VERSION-BENCHMARKS-REPORTS:READTEAMWIDGETS | View public Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — |
VERSION-BENCHMARKS-REPORTS:READUSERWIDGETS | View private Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User | — |
VERSION-BENCHMARKS-REPORTS:UPDATETEAMWIDGETS | Manage public Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Standard User | — |
VERSION-BENCHMARKS-REPORTS:UPDATEUSERWIDGETS | Manage private Version Benchmark report widgets. | Data Admin, Observability Lead, Platform Admin, Standard User | — |
Last updated on