You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/segment-app/iam/roles.md
+24-75Lines changed: 24 additions & 75 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,86 +20,36 @@ All Segment workspaces have the following roles, regardless of account type.
20
20
The following roles are only available to Segment Business Tier accounts.
21
21
22
22
### Connections
23
-
<table>
24
-
<tr>
25
-
<td>Role</td>
26
-
<td>Description</td>
27
-
<td>Scope</td>
28
-
</tr>
29
-
<tr>
30
-
<td>Source read-only</td>
31
-
<td>Read-only access to assigned source(s), source settings, connected streaming destinations, schema, live data in the debugger, and connected tracking plan(s).</td>
32
-
<td>Can be granted admin access to either:
33
-
<ul><li>All current and future sources, or
34
-
<li>Specific sources</li></ul></td>
35
-
</tr>
36
-
<tr>
37
-
<td>Warehouse admin</td>
38
-
<td>Edit access to assigned warehouse(s) and warehouse settings.</td>
39
-
<td>Can be granted to all current and future warehouses (including the ability to create new sources</td>
40
-
</tr>
41
-
<tr>
42
-
<td>Warehouse read-only</td>
43
-
<td>Read-only access to assigned warehouse(s) and warehouse settings.</td>
44
-
<td>Can be granted to all current and future warehouses</td>
| Source read-only | Read-only access to assigned source(s), source settings, connected streaming destinations, schema, live data in the debugger, and connected tracking plan(s). | Can be granted admin access to either 1) All current and future sources, or 2) Specific sources |
27
+
| Warehouse admin | Edit access to assigned warehouse(s) and warehouse settings. | Can be granted to all current and future warehouses (including the ability to create new sources |
28
+
| Warehouse read-only | Read-only access to assigned warehouse(s) and warehouse settings. | Can be granted to all current and future warehouses |
29
+
47
30
48
31
### Protocols
49
32
50
-
<table>
51
-
<tr>
52
-
<td>Role</td>
53
-
<td>Description</td>
54
-
<td>Scope</td>
55
-
</tr>
56
-
<tr>
57
-
<td>Protocols admin</td>
58
-
<td>Edit access to tracking plans in Protocols.</td>
59
-
<td>Can be granted to either all current and future tracking plans (including the ability to create new sources</td>
60
-
</tr>
61
-
<tr>
62
-
<td>Protocols read-only</td>
63
-
<td>Read-only access to tracking plans in Protocols.</td>
64
-
<td>Can be granted to all current and future tracking plans</td>
| Protocols admin | Edit access to tracking plans in Protocols. | Can be granted to either all current and future tracking plans (including the ability to create new sources |
37
+
| Protocols read-only | Read-only access to tracking plans in Protocols. | Can be granted to all current and future tracking plans |
67
38
68
39
### Personas
69
-
<table>
70
-
<tr>
71
-
<td>Role</td>
72
-
<td>Description</td>
73
-
<td>Scope</td>
74
-
</tr>
75
-
<tr>
76
-
<td>Personas admin</td>
77
-
<td>Edit access to Personas, including all audiences and computed traits. Personas admin can also view PII and change settings.</td>
78
-
<td>All audiences, computed traits,</td>
79
-
</tr>
80
-
<tr>
81
-
<td>Personas user</td>
82
-
<td>Edit access to traits and audiences. Cannot view PII or change settings in Personas.</td>
83
-
<td>The entire workspace</td>
84
-
</tr>
85
-
<tr>
86
-
<td>Personas read-only</td>
87
-
<td>Read-only access to Personas, including all audiences and computed traits.</td>
88
-
<td>The entire workspace</td>
89
-
</tr>
90
-
</table>
91
40
92
-
### Workspace
93
-
<table>
94
-
<tr>
95
-
<td>Role</td>
96
-
<td>Description</td>
97
-
<td>Scope</td>
98
-
</tr>
99
-
<tr>
100
-
<td>Minimal workspace access</td>
101
-
<td>Users with minimal workspace access can only view the workspace, without access to any sub-resources or ability to edit the workspace.</td>
| Personas admin | Edit access to Personas, including all audiences and computed traits. Personas admin can also view PII and change settings. | All audiences, computed traits |
44
+
| Personas user | Edit access to traits and audiences. Cannot view PII or change settings in Personas. | The entire workspace |
45
+
| Personas read-only | Read-only access to Personas, including all audiences and computed traits. | The entire workspace |
46
+
47
+
48
+
49
+
### Minimal Workspace Access
50
+
51
+
Administrators can grant users "Minimal Workspace Access". Users with minimal workspace access can only view the workspace. They do not have access to any sub-resources and cannot edit the workspace.
52
+
103
53
104
54
## Connecting resources
105
55
@@ -116,7 +66,6 @@ Connecting two resource instances requires access to both:
0 commit comments