User permissions
The following tables provide information on the rights and privileges granted to Qwiet users based on their assigned roles. The first major section covers organization-related roles, while the second covers team-related roles.
For more information about organization-related vs. team-related roles, see RBAC.
Organization roles
Administrative control and subscriptions
| Owner | Super admin | Power user | Member | Guest | |
|---|---|---|---|---|---|
| Change org owner | ✅ | ||||
| Assign super admin role | ✅ | ||||
| Delete an org | ✅ | ||||
| Claim and use Ocular license | ✅ | ✅ | ✅ | ✅ | ✅ |
| Manage Ocular licenses | ✅ | ✅ | |||
| Upgrade Qwiet subscription | ✅ | ✅ |
Organization management
| Owner | Super admin | Power user | Member | Guest | |
|---|---|---|---|---|---|
| Get basic info about the org | ✅ | ✅ | ✅ | ✅ | ✅ |
| Update org info | ✅ | ✅ | |||
| Get org configuration | ✅ | ✅ | |||
| Update org configuration | ✅ | ✅ | |||
| Manage SAML config | ✅ | ✅ | |||
| Get list of org's integration tokens | ✅ | ✅ | |||
| Create an integration token | ✅ | ✅ | |||
| Delete integration tokens | ✅ | ✅ |
Team and user management
| Owner | Super Admin | Power User | Member | Guest | |
|---|---|---|---|---|---|
| List org users | ✅ | ✅ | ✅ | ✅ | |
| List teams in the org | ✅ | ✅ | ✅ | ||
| Get info about teams | ✅ | ✅ | ✅ | ||
| Create invite to add users to the org | ✅ | ✅ | |||
| See pending invites | ✅ | ✅ | |||
| Delete pending invites | ✅ | ✅ | |||
| Update teams (modify which users and apps are affiliated with a team) | ✅ | ✅ | |||
| Update users' roles | ✅ | ✅ | |||
| Delete a team (does not delete the users or apps) | ✅ | ✅ | |||
| Delete users | ✅ | ✅ |
App management
| Owner | Super admin | Power user | Member | Guest | |
|---|---|---|---|---|---|
| List org apps | ✅ | ✅ | ✅ | ✅ | ✅ |
| Create (add) a new app via the Qwiet CLI | ✅ | ✅ | ✅ | ||
| Add an app via GitHub integration | ✅ | ✅ | ✅ | ||
| Delete an app | ✅ | ✅ | ✅ | ||
| Update app configuration (e.g., VCS settings, policies) | ✅ | ✅ | ✅ | ||
| Update custom policies | ✅ | ✅ |
Viewing scans and findings information
| Owner | Super admin | Power user | Member | Guest | |
|---|---|---|---|---|---|
| Read/write comments on findings | ✅ | ✅ | ✅ | ✅ | ✅ |
| Read results from analysis | ✅ | ✅ | ✅ | ✅ | ✅ |
| Update findings metadata | ✅ | ✅ | ✅ | ✅ | |
| Submit an app for analysis | ✅ | ✅ | ✅ | ||
| Create AutoFix Pull Request | ✅ | ✅ | ✅ |
Team roles
Team and user management
| Team admin | Team developer | Team manager | Team member | Team guest | |
|---|---|---|---|---|---|
| List users that belong to the org | ✅ | ✅ | ✅ | ✅ | |
| List own teams | ✅ | ✅ | |||
| Get info about own teams | ✅ | ✅ | |||
| Update team members | ✅ | ✅ |
App management
| Team admin | Team developer | Team manager | Team member | Team guest | |
|---|---|---|---|---|---|
| Add an app | ✅ | ✅ | |||
| Delete an app | ✅ | ||||
| Update app configuration (e.g., VCS settings, policies) | ✅ | ✅ | |||
| List org apps | |||||
| Create (add) a new app via the Qwiet CLI | |||||
| Add an app via GitHub integration |
Viewing scans and findings information
| Team admin | Team developer | Team manager | Team member | Team guest | |
|---|---|---|---|---|---|
| Read results from analysis | ✅ | ✅ | ✅ | ✅ | ✅ |
| Read/write comments on findings | ✅ | ✅ | ✅ | ✅ | ✅ |
| Update findings metadata | ✅ | ✅ | ✅ | ✅ | |
| Submit an app for analysis | ✅ | ✅ | ✅ | ||
| Create AutoFix Pull Request | ✅ | ✅ | ✅ |