Permissions

This page lists every permission resource available when configuring API keys. For an explanation of how permissions work, see API Key Permissions.

Access levels

Each permission pairs a resource with one access level:

Access level	Capabilities
Read	View, list, and retrieve resources
Write	Create, update, and delete resources

Every resource supports both read and write. An endpoint checks for the exact pair it needs — read on datasets does not imply write on datasets, and neither implies anything about another resource.

Resources

The API Key drawer at Settings > API Keys groups the 50 resources into the categories below. The categories are display-only; each resource is independent.

Data Management

Resource	Description
`datasets`	Dataset metadata, samples, statistics, and access rules
`data_streams`	Streaming ingestion and publishing
`data_planes`	Data plane registration and configuration
`data_plane_logs`	Data plane log submission
`compute_pools`	Compute pool registration and configuration
`attributes`	Rosetta Stone normalized attributes
`attribute_derivations`	Derived attribute definitions
`schema_preset`	Predefined schema templates
`profile_store_schema`	Profile store schema definitions
`profile_store_data`	Profile store data records
`lists`	List management
`uploads`	File uploads

Query & Analytics

Resource	Description
`nql`	NQL query execution
`queries`	Saved NQL queries
`views`	Saved view definitions
`agent_conversations`	Rosetta Chat and agent conversation history
`models`	AI/ML model definitions
`model_training`	Model training jobs
`model_inference`	Model inference jobs
`inference`	Inference operations
`forecasts`	Forecasting operations

Connectivity & Delivery

Resource	Description
`connections`	External system connections
`destinations`	Data delivery destinations
`deliveries`	Delivery execution and status
`subscriptions`	Data subscriptions
`commands_subscriptions_delivery`	Subscription delivery commands and file downloads
`events_subscriptions_transaction`	Subscription transaction events
`products`	Marketplace products
`mappings`	Rosetta Stone schema mappings
`webhooks`	Webhook endpoint configuration

Applications

Resource	Description
`apps`	Application and interface management
`app_profiles`	Application profiles
`app_invites`	App invite creation and lifecycle
`app_events`	Application event tracking
`installations`	Application installations
`contracts`	Data contracts

Account & Administration

Resource	Description
`access_tokens`	API key management
`users`	User profile updates
`company_info`	Organization settings and metadata
`api_info`	API metadata and status
`encryption_materials`	Encryption key management
`resources`	Platform resource buckets
`billings`	Billing and storage usage
`charges`	Charges and invoices
`payment_methods`	Payment method configuration
`usage`	Platform usage reporting
`jobs`	Job execution and status
`workflows`	Automated pipeline definitions
`persistent_permissions`	Persistent permission grants
`internal_reports`	Internal reporting endpoints

API Key Permissions

How scoped permissions protect your resources

API Keys

Create and manage API keys with scoped permissions

Overview

Connectors

Integrations

Workflow Reference

Webhook Reference

Security Reference

Architecture Reference

Error Reference

Deprecations

Model Inference Reference

Rosetta Stone Reference

UI Reference

SDKs

Glossary

Billing

Access levels

Resources

Data Management

Query & Analytics

Connectivity & Delivery

Applications

Account & Administration

API Key Permissions

API Keys

​Access levels

​Resources

​Data Management

​Query & Analytics

​Connectivity & Delivery

​Applications

​Account & Administration

​Related content

API Key Permissions

API Keys

Access levels

Resources

Data Management

Query & Analytics

Connectivity & Delivery

Applications

Account & Administration

Related content