Roles and permissions

These are the built-in roles for the Taxonomy service. Each row lists a role, what it grants, and the exact permissions it includes. Roles are system-defined (built-in) or custom; permissions are system-defined and read-only. The platform-wide Viewer, Editor, and Admin roles also apply across every service; see the roles and permissions catalogue. You can also compose a custom role from any of these permissions.

Role	Included permissions
Taxonomy Viewer Read-only access to all taxonomy resources	taxonomy.group.get taxonomy.group.list taxonomy.operation.get taxonomy.operation.list taxonomy.organisation.get taxonomy.organisation.list taxonomy.workspace.get taxonomy.workspace.list
Taxonomy Editor Read and write access to all taxonomy resources	taxonomy.group.create taxonomy.group.get taxonomy.group.list taxonomy.group.move taxonomy.group.update taxonomy.operation.get taxonomy.operation.list taxonomy.organisation.create taxonomy.organisation.get taxonomy.organisation.list taxonomy.organisation.update taxonomy.workspace.create taxonomy.workspace.get taxonomy.workspace.list taxonomy.workspace.move taxonomy.workspace.update
Taxonomy Admin Full access to all taxonomy resources	taxonomy.group.create taxonomy.group.delete taxonomy.group.get taxonomy.group.list taxonomy.group.move taxonomy.group.update taxonomy.operation.get taxonomy.operation.list taxonomy.organisation.create taxonomy.organisation.delete taxonomy.organisation.get taxonomy.organisation.list taxonomy.organisation.update taxonomy.workspace.create taxonomy.workspace.delete taxonomy.workspace.get taxonomy.workspace.list taxonomy.workspace.move taxonomy.workspace.update
Organisation Viewer View organisations	taxonomy.operation.get taxonomy.operation.list taxonomy.organisation.get taxonomy.organisation.list
Organisation Editor View and manage organisations	taxonomy.operation.get taxonomy.operation.list taxonomy.organisation.create taxonomy.organisation.get taxonomy.organisation.list taxonomy.organisation.update
Organisation Admin Full access to organisations	taxonomy.operation.get taxonomy.operation.list taxonomy.organisation.create taxonomy.organisation.delete taxonomy.organisation.get taxonomy.organisation.list taxonomy.organisation.update
Workspace Viewer View workspaces and operations	taxonomy.operation.get taxonomy.operation.list taxonomy.workspace.get taxonomy.workspace.list
Workspace Editor View and manage workspaces	taxonomy.operation.get taxonomy.operation.list taxonomy.workspace.create taxonomy.workspace.get taxonomy.workspace.list taxonomy.workspace.move taxonomy.workspace.update
Workspace Admin Full access to workspaces	taxonomy.operation.get taxonomy.operation.list taxonomy.workspace.create taxonomy.workspace.delete taxonomy.workspace.get taxonomy.workspace.list taxonomy.workspace.move taxonomy.workspace.update
Group Viewer View groups	taxonomy.group.get taxonomy.group.list
Group Editor View and manage groups	taxonomy.group.create taxonomy.group.get taxonomy.group.list taxonomy.group.move taxonomy.group.update
Group Admin Full access to groups	taxonomy.group.create taxonomy.group.delete taxonomy.group.get taxonomy.group.list taxonomy.group.move taxonomy.group.update

Related

• Taxonomy overview
• The authorization model
• Roles and permissions catalogue