Permissions List

The following tables list all available role-based permissions in Coralogix.

For each permission, you can also see which system roles include it by default and which API presets it is part of (when applicable).

Filter by system role: Filter by API preset:

Search:

Actions

Resource	Description	System roles	API presets
`TEAM-ACTIONS:EXECUTE`	Execute shared actions.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Actions
`TEAM-ACTIONS:READCONFIG`	View shared actions.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Actions
`TEAM-ACTIONS:UPDATECONFIG`	Manage shared actions.	Data Admin, Observability Lead, Platform Admin, Security User	Actions
`USER-ACTIONS:EXECUTE`	Create user actions.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Actions
`USER-ACTIONS:READCONFIG`	View private actions.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Actions
`USER-ACTIONS:UPDATECONFIG`	Manage private actions.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Actions

Administrator

Resource	Description	System roles	API presets
`TEAM-API-KEYS-SECURITY-SETTINGS:MANAGE`	Manage security settings for API keys.	Data Admin, Platform Admin	—
`TEAM-API-KEYS-SECURITY-SETTINGS:READCONFIG`	View security settings for API keys.	Data Admin, Observability Lead, Platform Admin	—
`TEAM-DOMAIN:MANAGE`	Create and modify your team's domain.	Platform Admin	TeamAdmin
`TEAM-DOMAIN:READCONFIG`	View your team's domain.	Platform Admin	TeamAdmin
`TEAM-GROUPS:MANAGE`	Create a group and control user membership and permissions.	Platform Admin	TeamAdmin
`TEAM-GROUPS:READCONFIG`	View groups, membership, and permissions.	Platform Admin	TeamAdmin
`TEAM-IP-ACCESS:MANAGE`	Configure and modify your team's IP access.	Platform Admin	TeamAdmin
`TEAM-IP-ACCESS:READCONFIG`	View your team's IP access.	Platform Admin	TeamAdmin
`TEAM-MEMBERS:MANAGE`	Control team membership by viewing, adding, and removing members.	Platform Admin	TeamAdmin
`TEAM-MEMBERS:READCONFIG`	View your team members.	Platform Admin	TeamAdmin
`TEAM-ROLES:MANAGE`	Create, delete, rename, and edit roles for your teams. To control team membership across all teams, use the Manage Team Membership permission.	Platform Admin	TeamAdmin
`TEAM-ROLES:READCONFIG`	View roles for your team.	Platform Admin	TeamAdmin
`TEAM-SCIM:MANAGE`	Configure and modify your team's SCIM.	Platform Admin	TeamAdmin
`TEAM-SCIM:READCONFIG`	View your team's SCIM.	Platform Admin	TeamAdmin
`TEAM-SESSIONS:MANAGE`	Define the duration of idle sessions for all users in the team. Enabling this option will end all current login sessions and require users to log in again.	Platform Admin	TeamAdmin
`TEAM-SESSIONS:READCONFIG`	View the duration of idle sessions for all users in the team.	Platform Admin	TeamAdmin
`TEAM-SLACK-NOTIFICATIONS:READCONFIG`	View team notifications on Slack.	Data Admin, Observability Lead, Platform Admin	—
`TEAM-SLACK-NOTIFICATIONS:UPDATECONFIG`	Create and manage team notifications on Slack.	Data Admin, Observability Lead, Platform Admin	—
`TEAM-SSO:MANAGE`	Configure and modify your team's SSO.	Platform Admin	TeamAdmin
`TEAM-SSO:READCONFIG`	View your team's SSO.	Platform Admin	TeamAdmin
`USER-SETTINGS:READCONFIG`	View the user's personal settings, such as the date format and the timezone.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`USER-SETTINGS:UPDATECONFIG`	Edit the user's personal settings, such as the date format and the timezone.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`TEAM:MANAGECONNECTIONTOORG`	Connect to or disconnect from an organization.	Platform Admin	—
`USER-AUTH-INFO:READGROUPS`	Allows each user to view their group membership.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`USER-EMAIL-NOTIFICATIONS:GETDAILYEMAILS`	Manage the daily auto-generated report that summarizes errors and critical logs in your system.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`USER-EMAIL-NOTIFICATIONS:GETDATAUSAGEWARNINGS`	Manage notifications regarding your team quota limit.	Data Admin, Platform Admin	—
`USER-EMAIL-NOTIFICATIONS:GETFLOWANOMALIES`	Manage flow anomaly notifications.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`USER-EMAIL-NOTIFICATIONS:GETSPIKEANOMALIES`	Manage spike anomaly notifications.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`TEAM-QUOTA:MANAGE`	Manage team quotas. Move quotas between 2 or more teams for which you have manage permissions.	Platform Admin	—
`TEAM-QUOTA:READ`	View your team's quota.	Platform Admin	—
`TEAM-SCOPES:MANAGE`	Create, delete, rename, and edit scopes for your teams.	Platform Admin	TeamAdmin
`TEAM-SCOPES:READCONFIG`	View scopes for your team.	Platform Admin	TeamAdmin
`DATA-INGEST-API-KEYS:MANAGE`	Create, modify and delete send your data API keys.	Data Admin, Platform Admin	APIKeys
`DATA-INGEST-API-KEYS:READCONFIG`	View send your data API keys.	Data Admin, Observability Lead, Platform Admin	APIKeys
`PERSONAL-CUSTOM-API-KEYS:MANAGE`	Create, modify and delete personal API keys.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	APIKeys
`PERSONAL-CUSTOM-API-KEYS:READCONFIG`	View personal API keys.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	APIKeys
`TEAM-CUSTOM-API-KEYS:MANAGE`	Create, modify and delete team level API keys.	Platform Admin	APIKeys
`TEAM-CUSTOM-API-KEYS:READCONFIG`	View team level API keys.	Platform Admin	APIKeys
`TEAM-LANDING-PAGE:MANAGE`	Define the default homepage for a whole team.	Platform Admin	TeamAdmin
`TEAM-LANDING-PAGE:READCONFIG`	View the default homepage for a whole team.	Platform Admin	TeamAdmin
`TEAM-AI-SETINGS:MANAGE`	Allow users to manage the AI team settings and the individual toggle state for each AI feature.	—	—
`TEAM-AI-SETTINGS:READCONFIG`	Allow users to view the AI team settings and the individual toggle state for each AI feature.	Data Admin, Observability Lead, Platform Admin	—
`ACCESS-POLICIES:READALL`	View any access policy.	—	—
`ACCESS-POLICIES:UPDATEALL`	Manage any access policy.	—	—
`DATA-INGEST-API-KEYS:READACCESSPOLICY`	View send-your-data API key access policies.	—	—
`DATA-INGEST-API-KEYS:UPDATEACCESSPOLICY`	Create, modify, and delete send-your-data API key access policies.	—	—
`TEAM-CUSTOM-API-KEYS:READACCESSPOLICY`	View team level API key access policies.	—	—
`TEAM-CUSTOM-API-KEYS:UPDATEACCESSPOLICY`	Update team level API key access policies.	—	—
`TEAM-ROLES:READSUMMARY`	Read groups summary.	—	—
`TEAM-ROLES:READTEAMMEMBERSSUMMARY`	Read team members summary.	—	—
`SECURE-LOGIN:MANAGE`	Configure SSO, MFA/2FA enforcement, and other login-related security policies.	Platform Admin	—
`SECURE-LOGIN:VIEW`	View SSO, MFA/2FA enforcement, and other login-related security policies.	Platform Admin	—
`PERSONAL-API-KEYS-REGISTRY:MANAGE`	Lifecycle actions across users personal API keys.	—	—
`PERSONAL-API-KEYS-REGISTRY:READ`	List/view personal API keys metadata across users.	—	—

AI

Resource	Description	System roles	API presets
`AI-APP-CATALOG:READ`	View Application Catalog.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	AiObservability
`AI-APP-DISCOVERY:MANAGE`	Activate AI App Discovery and rescan to detect new AI apps.	Data Admin, Observability Lead, Platform Admin	AiObservability
`AI-APP-DISCOVERY:READ`	View AI App Discovery.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	AiObservability
`AI-APP-EVALUATORS:MANAG`	Add, edit, and delete evals for an application.	—	—
`AI-APP-EVALUATORS:READ`	View Application Eval Catalog.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	AiObservability
`AI-OVERVIEW:READ`	View AI Overview.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	AiObservability
`AI-SPM:READ`	View AI Security Posture Management.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	AiObservability

Alerts

Resource	Description	System roles	API presets
`ALERTS-MAP:READ`	View visualized alerts in Alerts Map.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Alerts
`ALERTS:READCONFIG`	View Flow alert settings.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Alerts
`ALERTS:UPDATECONFIG`	Manage Flow alert settings.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Alerts
`LOGS.ALERTS:READCONFIG`	View log-based alert settings.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Alerts
`LOGS.ALERTS:UPDATECONFIG`	Manage log-based alert settings.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Alerts
`SPANS.ALERTS:READCONFIG`	View Trace Alerts settings.	Data Admin, Observability Lead, Platform Admin, Standard User	Alerts
`SPANS.ALERTS:UPDATECONFIG`	Manage Trace Alerts settings.	Data Admin, Observability Lead, Platform Admin, Standard User	Alerts
`METRICS.ALERTS:READCONFIG`	View Metric Alert settings.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Alerts
`METRICS.ALERTS:UPDATECONFIG`	Define and modify alert settings for Metric Alerts.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Alerts
`ALERTS:SNOOZE`	Snooze or unsnooze an Alert.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Alerts
`SUPPRESSION-RULES:READCONFIG`	Read Suppression-Rules settings.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Alerts
`SUPPRESSION-RULES:UPDATECONFIG`	Manage Suppression-Rules settings.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Alerts
`TEAM-ALERTS-SETTINGS:MANAGE`	Manage state of the toggle settings.	Data Admin, Observability Lead, Platform Admin	Alerts
`TEAM-ALERTS-SETTINGS:READCONFIG`	View the toggle in Settings.	Data Admin, Observability Lead, Platform Admin	Alerts
`SLO-MGMT.ALERTS:READCONFIG`	View SLO-based Alert Settings.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	SLO
`SLO-MGMT.ALERTS:UPDATECONFIG`	Manage SLO-based Alert Settings.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	SLO

APM

Resource	Description	System roles	API presets
`SERVERLESS:READ`	View Serverless Monitoring data.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	APM
`SERVICE-CATALOG:UPDATEDIMENSIONSCONFIG`	Manage Service Catalog dimensions.	Data Admin, Observability Lead, Platform Admin	APM
`SERVICE-CATALOG:UPDATESLICONFIG`	Manage Service Catalog SLIs.	Data Admin, Observability Lead, Platform Admin	APM
`SERVICE-MAP:READ`	View Service Map.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	APM
`SERVICE-CATALOG:READ`	View Service Catalog data.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	APM
`SERVICE-CATALOG:UPDATEAPDEXCONFIG`	Manage the Apdex configuration.	Data Admin, Observability Lead, Platform Admin	APM
`SERVICE-CATALOG:UPDATE`	Manage Service Catalog services.	Data Admin, Observability Lead, Platform Admin	APM

Auditing

Resource	Description	System roles	API presets
`TEAM-AUDITING:READCONFIG`	View team audit settings.	Data Admin, Platform Admin	Auditing
`TEAM-AUDITING:UPDATECONFIG`	Manage your team audit settings.	Data Admin, Platform Admin	Auditing

Cases

Resource	Description	System roles	API presets
`CASE-CONFIG:READ`	View Suppression window and Snooze period settings.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`CASE-CONFIG:UPDATE`	Modify Suppression window and Snooze period settings.	Data Admin, Observability Lead, Platform Admin	—
`CASE:ACKNOWLEDGE`	Acknowledge a case.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	—
`CASE:ASSIGN`	Assign a case to yourself or to other users.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	—
`CASE:CLOSE`	Close a case.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	—
`CASE:COMMENT`	Comment on a case.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	—
`CASE:READ`	View the list of cases and individual cases.	—	—
`CASE:UPDATE`	Update the case.	—	—

Coralogix Apps

Resource	Description	System roles	API presets
`LEGACY-ARCHIVE-QUERIES:EXECUTE`	Query data from the S3 archive.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	DataQuerying
`LEGACY-ARCHIVE-QUERIES:REINDEX`	Reindex archive queries.	Data Admin, Platform Admin	—
`TEAM-SAVED-VIEWS:READ`	View public shared views in the Explore Screen.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	SavedViews
`TEAM-SAVED-VIEWS:UPDATE`	Manage public shared views in the Explore Screen.	Data Admin, Observability Lead, Platform Admin, Security User	SavedViews
`USER-SAVED-VIEWS:READ`	View private shared views in the Explore Screen.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	SavedViews
`USER-SAVED-VIEWS:UPDATE`	Manage private shared views in the Explore Screen.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	SavedViews

Custom Dashboards

Resource	Description	System roles	API presets
`HOME-DASHBOARD:READTEAMWIDGETS`	View public Home Dashboard widgets.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`HOME-DASHBOARD:READUSERWIDGETS`	View private Home Dashboard widgets.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`HOME-DASHBOARD:UPDATETEAMWIDGETS`	Manage public Home Dashboard widgets.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	—
`HOME-DASHBOARD:UPDATEUSERWIDGETS`	View private Home Dashboard widgets.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	—
`TEAM-DASHBOARDS:READ`	View public Custom Dashboard.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Dashboards
`TEAM-DASHBOARDS:UPDATE`	Manage public Custom Dashboard.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Dashboards
`TEAM-DASHBOARDS:READACCESSPOLICY`	View public Custom Dashboard access policies.	—	—
`TEAM-DASHBOARDS:UPDATEACCESSPOLICY`	Manage public Custom Dashboard access policies.	—	—

Data Engine

Resource	Description	System roles	API presets
`SYSTEM-DATASETS:MANAGE`	Manage system datasets.	Data Admin, Platform Admin	—
`SYSTEM-DATASETS:READCONFIG`	View system datasets.	Data Admin, Observability Lead, Platform Admin	—
`PIPELINE-ANALYZER:READ`	Inspect the exact rules applied to each log.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`TEAM-DATASETS:APPENDDATA`	Allow users to add new data to datasets.	Data Admin, Observability Lead, Platform Admin, Security User	—
`TEAM-DATASETS:OVERWRITEDATA`	Allow users to replace existing dataset content.	Data Admin, Observability Lead, Platform Admin	—
`TEAM-DATASETS:READACCESSPOLICY`	Allow users to read access policy for a specific datasets.	Data Admin, Platform Admin	—
`TEAM-DATASETS:READDATA`	Allow users to read data from datasets.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`TEAM-DATASETS:UPDATEACCESSPOLICY`	Allow users to update access policy for a specific datasets.	Data Admin, Platform Admin	—
`SYSTEM-DATASETS:READACCESSPOLICY`	Allow users to read access policy for a specific datasets.	Data Admin, Observability Lead, Platform Admin	—
`SYSTEM-DATASETS:UPDATEACCESSPOLICY`	Allow users to update access policy for a specific datasets.	Platform Admin	—
`SYSTEM-DATASETS:APPENDDATA`	Allow users to add new data to datasets.	Data Admin, Observability Lead, Platform Admin, Security User	—
`SYSTEM-DATASETS:OVERWRITEDATA`	Allow users to replace existing dataset content.	Data Admin, Observability Lead, Platform Admin	—
`SYSTEM-DATASETS:READDATA`	Allow users to read data from datasets.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`TEAM-DATASETS:MANAGE`	Allow user to manage full CRUD.	—	—

Data Plans

Resource	Description	System roles	API presets
`DATA-USAGE:MANAGE`	Enable and disable Data Usage Metrics.	Data Admin, Platform Admin	DataUsage
`DATA-USAGE:READ`	View Data Usage Metrics.	Data Admin, Platform Admin	DataUsage
`LOGS.TCO:READPOLICIES`	View existing log TCO policies.	Data Admin, Observability Lead, Platform Admin, Security User	TCOPolicies
`LOGS.TCO:UPDATEPOLICIES`	View and modify existing log TCO policies and create new ones.	Data Admin, Platform Admin	TCOPolicies
`METRICS.TCO:READPOLICIES`	View metrics TCO policies.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	TCOPolicies
`METRICS.TCO:UPDATEPOLICIES`	Manage metrics TCO policies.	Data Admin, Observability Lead, Platform Admin	TCOPolicies
`SPANS.TCO:READPOLICIES`	View existing tracing TCO policies.	Data Admin, Observability Lead, Platform Admin	TCOPolicies
`SPANS.TCO:UPDATEPOLICIES`	View and modify existing tracing TCO policies and create new ones.	Data Admin, Platform Admin	TCOPolicies
`TEAM-PAY-AS-YOU-GO:READCONFIG`	View Pay-As-You-Go settings.	Data Admin, Platform Admin	Payments
`TEAM-PAY-AS-YOU-GO:UPDATECONFIG`	Manage Pay-As-You-Go settings.	Platform Admin	Payments
`TEAM-PAYMENTS:READCONFIG`	View your team's account and payment method.	Data Admin, Platform Admin	Payments
`TEAM-PAYMENTS:UPDATECONFIG`	Manage your team's account and payment method.	Platform Admin	Payments

Datamap

Resource	Description	System roles	API presets
`DATA-MAP:READMAPS`	View DataMap configurations.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	DataMap
`DATA-MAP:UPDATEMAPS`	Configure DataMap.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	DataMap

Enrichments

Resource	Description	System roles	API presets
`CLOUD-METADATA-ENRICHMENT:READCONFIG`	View AWS Enrichment configuration.	Data Admin, Observability Lead, Platform Admin, Security User	Enrichments
`CLOUD-METADATA-ENRICHMENT:UPDATECONFIG`	Manage AWS Enrichment configuration.	Data Admin, Observability Lead, Platform Admin, Security User	Enrichments
`GEO-ENRICHMENT:READCONFIG`	View Geo Enrichment configuration.	Data Admin, Observability Lead, Platform Admin, Security User	Enrichments
`GEO-ENRICHMENT:UPDATECONFIG`	Manage Geo Enrichment configuration.	Data Admin, Observability Lead, Platform Admin, Security User	Enrichments
`SECURITY-ENRICHMENT:READCONFIG`	View the Unified Threat Intelligence Enrichment configuration.	Data Admin, Observability Lead, Platform Admin, Security User	Enrichments
`SECURITY-ENRICHMENT:UPDATECONFIG`	Manage the Unified Threat Intelligence Enrichment configuration.	Data Admin, Platform Admin, Security User	Enrichments
`TEAM-CUSTOM-ENRICHMENT:READCONFIG`	View the Custom Enrichment configuration.	Data Admin, Observability Lead, Platform Admin, Security User	Enrichments
`TEAM-CUSTOM-ENRICHMENT:READDATA`	View the Custom Enrichment data.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Enrichments
`TEAM-CUSTOM-ENRICHMENT:UPDATECONFIG`	Manage the Custom Enrichment configuration.	Data Admin, Observability Lead, Platform Admin, Security User	Enrichments
`TEAM-CUSTOM-ENRICHMENT:UPDATEDATA`	Manage data for Custom Enrichment ingestion.	Data Admin, Observability Lead, Platform Admin, Security User	Enrichments

Fleet Management

Resource	Description	System roles	API presets
`REMOTE-CONFIGURATION:MANAGE`	Allow admins to manage remote configurations.	Data Admin, Platform Admin	FleetManagement

Hosted Apps

Resource	Description	System roles	API presets
`GRAFANA:READ`	View Grafana Dashboards.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Grafana
`GRAFANA:UPDATE`	Create, modify, and remove Grafana Dashboards.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Grafana
`OPENSEARCH-DASHBOARDS:READ`	View OpenSearch dashboards.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	OpenSearchDashboards
`OPENSEARCH-DASHBOARDS:UPDATE`	Create, modify, and remove OpenSearch dashboards.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	OpenSearchDashboards

Incidents

Resource	Description	System roles	API presets
`INCIDENTS:ACKNOWLEDGE`	Acknowledge events in triggered alerts.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	Incidents
`INCIDENTS:ASSIGN`	Assign an event in triggered alerts.	Data Admin, Observability Lead, Platform Admin, Security User	Incidents
`INCIDENTS:CLOSE`	Manually resolve events in triggered alerts.	Data Admin, Observability Lead, Platform Admin, Security User	Incidents
`INCIDENTS:READ`	View events in triggered alerts.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	Incidents
`INCIDENTS:SNOOZE`	Snooze events in triggered alerts.	Data Admin, Observability Lead, Platform Admin, Security User	Incidents

Infrastructure Monitoring

Resource	Description	System roles	API presets
`K8S-INFRA-MONITORING:READCONFIG`	View the Kubernetes Infrastructure Monitoring configuration.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	InfraMonitoring
`K8S-INFRA-MONITORING:UPDATECONFIG`	Manage the Kubernetes Infrastructure Monitoring configuration.	Data Admin, Observability Lead, Platform Admin	InfraMonitoring
`K8S-INFRA-MONITORING:READ`	View Kubernetes Infrastructure Monitoring data.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	InfraMonitoring
`RESOURCE-CATALOG:READ`	View Resource Catalog data.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	InfraMonitoring

Integrations

Resource	Description	System roles	API presets
`CONTEXTUAL-DATA:READCONFIG`	View configurations for Native Integrations (Contextual Data).	Data Admin, Observability Lead, Platform Admin, Security User	ContextualData
`CONTEXTUAL-DATA:UPDATECONFIG`	Manage configurations for Native Integrations (Contextual Data).	Data Admin, Platform Admin	ContextualData
`EXTENSIONS:DEPLOY`	Deploy, undeploy, and update extension packages.	Data Admin, Platform Admin, Security User	Extensions
`EXTENSIONS:READCONFIG`	View extension packages.	Data Admin, Observability Lead, Platform Admin, Security User	Extensions
`INTEGRATIONS:DEPLOY`	Deploy, undeploy, and update integrations.	Data Admin, Platform Admin	Integrations
`INTEGRATIONS:READCONFIG`	View deployed integration packages.	Data Admin, Observability Lead, Platform Admin, Security User	Integrations
`EXTENSIONS:UPDATECONFIG`	Add, update, or delete extension packages.	Data Admin, Platform Admin	Extensions

Investigations

Resource	Description	System roles	API presets
`INVESTIGATIONS:READ`	View investigations to which you've been invited or are public.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`INVESTIGATIONS:READALL`	View all private and public investigations without invitation.	Observability Lead, Platform Admin, Security User	—
`INVESTIGATIONS:UPDATE`	Create and update investigations to which you've been invited or are public.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	—
`INVESTIGATIONS:UPDATEALL`	Create investigations and update all private and public investigations without invitation.	Observability Lead, Platform Admin, Security User	—

LiveTail

Resource	Description	System roles	API presets
`LIVETAIL:READ`	View LiveTail data.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	LiveTail

Logs

Resource	Description	System roles	API presets
`LOGS.DATA-ANALYTICS#HIGH:READ`	View metadata for frequent-search logs in the form of mapping statistics.	Data Admin, Platform Admin	DataAnalytics
`LOGS.DATA-API#HIGH:READDATA`	Query frequent-search logs.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	DataQuerying
`LOGS.DATA-API#LOW:READDATA`	Query Monitoring and Compliance logs.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	DataQuerying
`LOGS.DATA-SETUP#LOW:READCONFIG`	View archive settings for Monitoring and Compliance logs.	Data Admin, Observability Lead, Platform Admin, Security User	DataSetup
`LOGS.DATA-SETUP#LOW:UPDATECONFIG`	Manage archive settings for Monitoring and Compliance logs.	Data Admin, Platform Admin	DataSetup
`LOGS.RESERVED-FIELDS:MANAGE`	Add, edit, or delete the schema's fields.	Data Admin, Observability Lead, Platform Admin	—
`LOGS.RESERVED-FIELDS:READ`	Only view the fields of the schema.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—
`SPLIT-INDEX:MANAGE`	Apply split index on demand to apply reserved field changes.	Data Admin, Observability Lead, Platform Admin	—

Metrics

Resource	Description	System roles	API presets
`METRICS.DATA-ANALYTICS#HIGH:READ`	View metrics metadata under Metrics Usage.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	DataAnalytics
`METRICS.DATA-API#HIGH:READDATA`	Query metrics.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	DataQuerying
`METRICS.DATA-SETUP#LOW:READCONFIG`	View archive bucket settings.	Data Admin, Observability Lead, Platform Admin, Security User	DataSetup
`METRICS.DATA-SETUP#LOW:UPDATECONFIG`	Manage archive bucket settings.	Data Admin, Platform Admin	DataSetup
`STREAMING-AGGREGATIONS:READCONFIG`	View a list of streaming aggregation rules.	Data Admin, Observability Lead, Platform Admin, Read-Only User	—
`STREAMING-AGGREGATIONS:UPDATECONFIG`	Add or delete streaming aggregation rules.	Data Admin, Observability Lead, Platform Admin	—

Notifications

Resource	Description	System roles	API presets
`OUTBOUND-WEBHOOKS:READCONFIG`	View generic outbound webhooks configuration.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	OutboundWebhooks
`OUTBOUND-WEBHOOKS:UPDATECONFIG`	Create and modify the outbound webhooks configuration.	Data Admin, Observability Lead, Platform Admin, Security User, Standard User	OutboundWebhooks
`OUTBOUND-WEBHOOKS:READSUMMARY`	View all available outbound webhooks names.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	OutboundWebhooks
`NOTIFICATION-CENTER-CONNECTORS:READCONFIG`	View the existing connectors in the notification center and their field data.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	NotificationCenter
`NOTIFICATION-CENTER-CONNECTORS:READSUMMARY`	View the list of existing connectors in the notification center.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	NotificationCenter
`NOTIFICATION-CENTER-CONNECTORS:UPDATECONFIG`	Create and edit connectors in the notification center and their field data.	Data Admin, Observability Lead, Platform Admin	NotificationCenter
`NOTIFICATION-CENTER-PRESETS:READCONFIG`	View the existing presets in the notification center and their field templates.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	NotificationCenter
`NOTIFICATION-CENTER-PRESETS:READSUMMAR`	View the list of existing presets in the notification center.	—	—
`NOTIFICATION-CENTER-PRESETS:UPDATECONFIG`	Create and edit presets in the notification center and their field templates.	Data Admin, Observability Lead, Platform Admin	NotificationCenter
`NOTIFICATION-CENTER-ROUTERS:READCONFIG`	View the existing routers in the notification center and their routing rules.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	NotificationCenter
`NOTIFICATION-CENTER-ROUTERS:READSUMMARY`	View the list of existing routers in the notification center.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	NotificationCenter
`NOTIFICATION-CENTER-ROUTERS:UPDATECONFIG`	Create and edit routers in the notification center and their routing rules.	Data Admin, Observability Lead, Platform Admin	NotificationCenter

Parsing Rules

Resource	Description	System roles	API presets
`PARSING-RULES:READCONFIG`	View parsing rules.	Data Admin, Observability Lead, Platform Admin, Security User	ParsingRules
`PARSING-RULES:UPDATECONFIG`	Create, modify, or remove parsing rules.	Data Admin, Observability Lead, Platform Admin, Security User	ParsingRules

Quota Rules

Resource	Description	System roles	API presets
`TEAM-QUOTA-RULES:MANAGE`	Manage team quota rules. Allocate quota units per entity type.	Data Admin, Platform Admin	—
`TEAM-QUOTA-RULES:READ`	View team quota rules. Allocate quota units per entity type.	Data Admin, Observability Lead, Platform Admin	—

RUM

Resource	Description	System roles	API presets
`RUM:VIEW`	View RUM.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—
`SOURCE-MAPPING:READMAPPING`	Read RUM source maps.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	SourceMapping
`SOURCE-MAPPING:UPLOADMAPPING`	Upload RUM source maps.	Platform Admin	SourceMapping
`RUM-TEAM-SAVED-FILTER:READ`	View public saved filters in your RUM dashboard.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—
`RUM-TEAM-SAVED-FILTER:UPDATE`	Manage public saved filters in your RUM dashboard.	Data Admin, Observability Lead, Platform Admin, Standard User	—
`RUM-USER-SAVED-FILTER:READ`	View private saved filters in your RUM dashboard.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—
`RUM-USER-SAVED-FILTER:UPDATE`	Manage private saved filters in your RUM dashboard.	Data Admin, Observability Lead, Platform Admin, Standard User	—
`HIDE-ERRORS:READCONFIG`	View hidden errors in the UI.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—
`HIDE-ERRORS:UPDATECONFIG`	Hide specific errors from the UI.	Data Admin, Observability Lead, Platform Admin, Standard User	—
`RUM-SETTINGS:UPDATECONFIG`	Manage RUM settings.	Data Admin, Observability Lead, Platform Admin, Standard User	—
`SESSION-RECORDING:READCONFIG`	Record user sessions.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—

Recording Rules

Resource	Description	System roles	API presets
`LOGS.EVENTS2METRICS:READCONFIG`	View Events2Metrics configuration when the source input is logs.	Data Admin, Observability Lead, Platform Admin, Security User	Events2Metrics
`LOGS.EVENTS2METRICS:UPDATECONFIG`	Configure or modify the configuration for Events2Metrics, when the source input is logs.	Data Admin, Observability Lead, Platform Admin, Security User	Events2Metrics
`METRICS.RECORDING-RULES:READCONFIG`	View recording rules.	Data Admin, Observability Lead, Platform Admin, Security User	RecordingRules
`METRICS.RECORDING-RULES:UPDATECONFIG`	Create, modify, or import recording rules.	Data Admin, Observability Lead, Platform Admin, Security User	RecordingRules
`SPANS.EVENTS2METRICS:READCONFIG`	View Events2Metrics configuration when the source input is spans.	Data Admin, Observability Lead, Platform Admin	Events2Metrics
`SPANS.EVENTS2METRICS:UPDATECONFIG`	Configure or modify the configuration for Event2Metrics, when the source input is spans.	Data Admin, Observability Lead, Platform Admin	Events2Metrics
`GLOBAL-MAPPING:READCONFIG`	View Label Mapping.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—
`GLOBAL-MAPPING:UPDATECONFIG`	Manage Label Mapping.	Data Admin, Observability Lead, Platform Admin	—
`TEAM-SCHEMA-MANAGER:MANAGE`	Allow users to edit, reserve, or map schema fields as needed.	Data Admin, Observability Lead, Platform Admin	—
`TEAM-SCHEMA-MANAGER:READCONFIG`	Allow users to see field names, types, cardinality, popularity, and other schema-level metrics.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—

Schema Tracking and Management

Resource	Description	System roles	API presets
`GLOBAL-MAPPING:READCONFIG`	View Label Mapping.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—
`GLOBAL-MAPPING:UPDATECONFIG`	Manage Label Mapping.	Data Admin, Observability Lead, Platform Admin	—
`TEAM-SCHEMA-MANAGER:MANAGE`	Allow users to edit, reserve, or map schema fields as needed.	Data Admin, Observability Lead, Platform Admin	—
`TEAM-SCHEMA-MANAGER:READCONFIG`	Allow users to see field names, types, cardinality, popularity, and other schema-level metrics.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	—

Profiles

Resource	Description	System roles	API presets
`PROFILES.CPU-PROFILES:READ`	View CPU profiling data.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	DataQuerying
`PROFILES.DEBUG-SYMBOLS:UPLOAD`	Upload debug symbols.	Data Admin, Platform Admin	SourceMapping

SLO Management

Resource	Description	System roles	API presets
`SLO:READCONFIG`	View SLO settings.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Security User, Standard User	SLO
`SLO:UPDATECONFIG`	Manage SLO settings.	Data Admin, Observability Lead, Platform Admin, Security User	SLO

Snowbit

Resource	Description	System roles	API presets
`CLOUD-SECURITY:DEPLOY`	Deploy and undeploy Coralogix Cloud Security (STA).	Platform Admin, Security User	Security
`CLOUD-SECURITY:READCONFIG`	View configuration for, and status of, Coralogix Cloud Security (STA).	Platform Admin, Security User	Security
`SNOWBIT.ALERTS:CREATESECURITYALERT`	Create an STA Alert.	Platform Admin, Security User, Standard User	Security
`SNOWBIT.ALERTS:READ`	View STA Alert settings.	Platform Admin, Security User, Standard User	Security
`SNOWBIT.CSPM:READ`	View Cloud Posture Security Management data.	Platform Admin, Security User	Security
`SNOWBIT.OVERVIEW:READ`	View Snowbit overview data.	Platform Admin, Security User	Security
`SNOWBIT.RESOURCE-EXPLORER:READ`	View Snowbit Resource Explorer data.	Platform Admin, Security User	Security
`SNOWBIT.SETUP:MANAGE`	View Snowbit SSPM data.	Platform Admin, Security User	Security

Spans

Resource	Description	System roles	API presets
`SPANS.DATA-API#HIGH:READDATA`	Query frequent-search spans.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	DataQuerying
`SPANS.DATA-API#LOW:READDATA`	Query Monitoring and Compliance spans.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	DataQuerying

Version Benchmarks

Resource	Description	System roles	API presets
`VERSION-BENCHMARK-TAGS:READ`	View Version Benchmark tags.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	CICDIntegration
`VERSION-BENCHMARKS-REPORTS:READTEAMWIDGETS`	View public Version Benchmark report widgets.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—
`VERSION-BENCHMARKS-REPORTS:READUSERWIDGETS`	View private Version Benchmark report widgets.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	—
`VERSION-BENCHMARKS-REPORTS:UPDATETEAMWIDGETS`	Manage public Version Benchmark report widgets.	Data Admin, Observability Lead, Platform Admin, Standard User	—
`VERSION-BENCHMARKS-REPORTS:UPDATEUSERWIDGETS`	Manage private Version Benchmark report widgets.	Data Admin, Observability Lead, Platform Admin, Standard User	—
`VERSION-BENCHMARKS-REPORTS:READ`	View Version Benchmark reports.	Data Admin, Observability Lead, Platform Admin, Read-Only User, Standard User	CICDIntegration
`VERSION-BENCHMARK-TAGS:UPDATE`	Modify Version Benchmark tags.	Data Admin, Observability Lead, Platform Admin, Standard User	CICDIntegration

Need help? Contact Support.

What's new? Find out here.

LLM? Read llms.txt.

Previous Roles

Next Policies