> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flexxible.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles

Roles allow you to segment access to organization information or the different platform features based on the user who has signed in and the role they have applied. Within the same role, you can assign different permission levels for different organizations.

<img src="https://mintcdn.com/flexxible/spYy2seex0AOBp8r/images/features/roles-list.png?fit=max&auto=format&n=spYy2seex0AOBp8r&q=85&s=6d94b7cac6e3365955f2f5c8c92086ec" alt="roles-list" width="854" height="374" data-path="images/features/roles-list.png" />

## Create a new role

To create a new role, click the **New** button. A form will open requesting a name for the new role. Once assigned, it will appear in the roles table.

### Multi-tenant environments

An organization's roles let you configure access and visibility for the organization's users, and they also allow you to include permissions to configure access and visibility for dependent organizations.

An organization is dependent when:

* It is a customer-type organization and the roles and users are in the higher-level partner-type organization.
* It is a sub-organization of a customer organization.

Roles are assigned to users and contain the definition of access and visibility levels, allowing you to set different configurations within the same role for the root organization and its sub-organizations. This can only be done in a top-down manner; that is, from a higher-level organization, permissions can be assigned to that organization itself and to the organizations that depend on it.

## Table information

The roles table shows the following information:

* **Name.** Name assigned to the role.
* **Assigned users.** Users to whom that role is assigned.
* **Assigned tenants.** Tenants to which that role is assigned.
* **Created by.** User who created the role.
* **Updated by.** User who updated the role's information.
* **Created on.** Role creation date.
* **Updated on.** Role update date.
* **Action.**: Provides access to **View details** and to **Permissions**.

If you click the arrow located to the left of the role name, a sub-table will be displayed from where you can access direct information about the permissions assigned to that role, as well as the tenants to which that permission has been assigned.

<img src="https://mintcdn.com/flexxible/spYy2seex0AOBp8r/images/features/grid-permissions.gif?s=43ab8b4fbb1d7c2f6dfab366fb985a92" alt="grid-permissions" width="1863" height="556" data-path="images/features/grid-permissions.gif" />

## Details view

When you click on an item in the roles table, you go to the details view, which shows the following tabs:

* Details
* Permissions
* Users
* API keys

### Details

This tab holds additional information about the role: name, number of users and tenants to whom that role has been assigned, creation and update dates, and the user who created it.

At the bottom right, the **Clone** button allows you to copy and reuse the role. **Edit** provides the option to change the role's name.

### Permissions

Through **Permissions** you can view, create, or edit permissions. In this view, you can configure a single group of permissions for each selectable organization.

**New** lets you create a new permission with the following information:

* All tenants
* Tenant
* Permissions
* All reporting groups
* Reporting groups

#### All tenants

Lets you apply the permissions to all organizations you have access to. In service provider use cases, it allows you to manage permissions centrally and replicate the changes to the managed customer organizations.

When a role's permissions mix permissions applied at the "All tenants" level with organization-specific configurations, which may be different, the more specific permission wins. This way you can create a default configuration for all organizations and override those that require modifications.

#### Tenant

Lets you specify the organization to which permissions are being granted in the role being edited; the **All tenants** option lets you configure the role's permissions to apply to all organizations you have access to.

#### Permissions

Lets you select the access level the role will have.

#### All reporting groups

Lets you apply the permissions to all reporting groups you have access to. In service provider use cases, it allows you to manage permissions centrally and replicate the changes to the managed customer organizations.

#### Reporting groups

Lets you apply the permissions to the specified reporting groups; there can be more than one.

### Users

This table lets you view the users who have the role assigned, and provides the option to perform searches.

### API keys

Shows a table with the list of API keys created for that role.

The fields contain the following information:

* **Name.** Name assigned to the API key.
* **Status.** Can be Active, Expired, or Revoked.
* **Key ID.** ID corresponding to the API key.
* **Creation date.** Date and time the key was created.
* **Expiration date.** Date and time the key expires.
* **Revocation date.** If it has been revoked, revocation date and time.

## List of roles

The platform distinguishes the following roles:

| Abbreviation | Role                                 |
| :----------- | :----------------------------------- |
| Org Admin    | Organization administrator           |
| Org Admin RO | Read-only Organization administrator |
| User         | User                                 |
| L1           | Support team                         |
| L1 RO        | Read-only L1 support team            |
| L2           | L2 support team                      |
| L2 RO        | Read-only L2 support team            |
| L3           | L3 engineering team                  |
| L3 RO        | Read-only L3 engineering team        |
| Billing      | Billing                              |

### Permission tables by role

Roles let you group different access levels. The detail of the visibility and actions available for each role is defined in the following table:

#### Home

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Read   | ✅         | ✅            | ✅    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ✅       |

#### Operations

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Read   | ✅         | ✅            | ⭐    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |

#### Audit logs

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Read   | ✅         | ✅            | ✅    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ✅       |

#### Flows

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Read   | ✅         | ✅            | ⭐    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Create | ✅         | ❌            | ⭐⭐   | ❌  | ❌     | ❌  | ❌     | ✅  | ❌     | ❌       |
| Modify | ✅         | ❌            | ⭐⭐   | ❌  | ❌     | ❌  | ❌     | ✅  | ❌     | ❌       |
| Delete | ✅         | ❌            | ⭐⭐   | ❌  | ❌     | ❌  | ❌     | ✅  | ❌     | ❌       |

#### Reports

| Feature        | Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :------------- | :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| List           | Read   | ✅         | ✅            | ❌    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |
| Details        | Read   | ✅         | ✅            | ❌    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |
|                | Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ❌     | ❌       |
|                | Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ❌     | ❌       |
| Settings       | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ❌     | ❌       |
| Create with AI | Read   | ✅         | ❌            | ✅    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |
|                | Create | ✅         | ✅            | ✅    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |
|                | Modify | ✅         | ✅            | ✅    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |
|                | Delete | ✅         | ✅            | ✅    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |

#### Tenants

| Feature    | Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :--------- | :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
|            | Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
|            | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ✅       |
|            | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
|            | Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Activation | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ✅       |

#### Monitor

| Feature        | Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :------------- | :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Active alerts  | Read   | ✅         | ✅            | ✅    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |
| Alert settings | Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
|                | Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
|                | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
|                | Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Workspaces

| Feature          | Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :--------------- | :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
|                  | Read   | ✅         | ✅            | ⭐    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |
|                  | Modify | ✅         | ❌            | ✅    | ✅  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
|                  | Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
| Workspace groups | Read   | ✅         | ✅            | ⭐    | ✅  | ✅     | ✅  | ✅     | ✅  | ✅     | ❌       |
|                  | Create | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
|                  | Modify | ✅         | ❌            | ❌    | ✅  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
|                  | Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |

#### Updates

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Read   | ✅         | ✅            | ⭐    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Create | ✅         | ❌            | ⭐⭐   | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Modify | ✅         | ❌            | ⭐⭐   | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Delete | ✅         | ❌            | ⭐⭐   | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Analyzer

| Feature                | Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :--------------------- | :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Installed applications | Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ❌       |
|                        | Modify | ✅         | ❌            | ✅    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
| Licenses               | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ❌       |
|                        | Create | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
|                        | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
|                        | Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
| SAM                    | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ❌       |

#### Microservices

| Feature | Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :------ | :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
|         | Create | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
|         | Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ❌       |
|         | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
| Enabled | Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ❌       |
|         | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |

#### Billing

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ✅       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ✅       |

#### Product

| Feature             | Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :------------------ | :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
|                     | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Report              | Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Environment         | Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
|                     | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Baseline            | Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| FlexxAgent settings | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
|                     | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Integrations

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Webhooks

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Modules

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Information

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ✅       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Policies

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Read   | ✅         | ✅            | ✅    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### API keys

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Reporting groups

| Feature             | Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :------------------ | :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
|                     | Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
|                     | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
|                     | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
|                     | Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| FlexxAgent settings | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
|                     | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Automatic update    | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| FlexxAgent version  | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
|                     | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Magic link          | Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
|                     | Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
|                     | Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Roles

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ❌       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### Users

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ❌       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

#### DaaS

| Action | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :----- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Create | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Read   | ✅         | ✅            | ❌    | ❌  | ❌     | ❌  | ❌     | ✅  | ✅     | ❌       |
| Modify | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Delete | ✅         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |

<Info>
  * ✅ Has access.
  * ⭐ Has access if they additionally have L1 in Workspaces.
  * ⭐⭐ Has access if they additionally have L2 in Workspaces.
  * ❌ Does not have access.
</Info>

### Permission tables for microservices

The user's role corresponds to the organization where the microservice was created.

| Action                       | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :--------------------------- | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Clone / create               | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
| View                         | ✅         | ✅            | 🔑   | ❌  | ❌     | ✅  | ✅     | ✅  | ✅     | ❌       |
| Edit                         | ✅         | ❌            | 💡   | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
| Change to public or private  | ❌         | ❌            | ❌    | ❌  | ❌     | ❌  | ❌     | ❌  | ❌     | ❌       |
| Edit visibility when private | ✅         | ❌            | 💡   | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |

<Info>
  * ✅ Has access.
  * 🔑 Has access if they additionally have read-only L1 in Workspaces.
  * 💡 Has access if they are the author of the microservice.
  * ❌ Does not have access.
</Info>

#### Enabled microservices

The user's role corresponds to the organization where the microservice was enabled.

| Action  | Org Admin | Org Admin RO | User | L1 | L1 RO | L2 | L2 RO | L3 | L3 RO | Billing |
| :------ | :-------- | :----------- | :--- | :- | :---- | :- | :---- | :- | :---- | :------ |
| Enable  | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
| Disable | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |
| Edit    | ✅         | ❌            | ❌    | ❌  | ❌     | ✅  | ❌     | ✅  | ❌     | ❌       |

<Info>
  * ✅ Has access.
  * ❌ Does not have access.
</Info>
