Access levels
Each permission pairs a resource with one of two access levels:| Access Level | Capabilities |
|---|---|
| Read | View, list, and retrieve resources |
| Write | Create, update, and delete resources |
Core Data
| Resource | Read | Write | Description |
|---|---|---|---|
| Datasets | Yes | Yes | Dataset metadata, samples, statistics, and access rules |
| DataStreams | Yes | Yes | Data stream ingestion and publishing |
| Views | Yes | Yes | Saved view definitions |
| Queries | Yes | Yes | NQL query management and execution |
| Subscriptions | Yes | Yes | Data subscriptions and NQL operations |
Infrastructure
| Resource | Read | Write | Description |
|---|---|---|---|
| DataPlanes | Yes | Yes | Data plane configuration and encryption materials |
| Connections | Yes | Yes | External system connections |
| Destinations | Yes | Yes | Data delivery destinations |
| EncryptionMaterials | — | Yes | Encryption key management |
| Resources | Yes | Yes | Platform resource buckets |
Applications
| Resource | Read | Write | Description |
|---|---|---|---|
| Apps | Yes | Yes | Application and interface management |
| AppProfiles | Yes | Yes | Application profiles |
| AppEvents | — | Yes | Application event tracking |
| Installations | Yes | Yes | Application installations |
| ProfileStoreSchema | Yes | Yes | Profile store schema definitions |
| ProfileStoreData | — | Yes | Profile store data records |
Identity & Access
| Resource | Read | Write | Description |
|---|---|---|---|
| AccessTokens | Yes | Yes | API key management |
| Users | — | Yes | User profile updates |
| CompanyInfo | Yes | Yes | Organization settings and metadata |
Automation
| Resource | Read | Write | Description |
|---|---|---|---|
| Jobs | Yes | Yes | Job execution and status |
| Workflows | Yes | Yes | Automated pipeline definitions |
| Webhooks | Yes | Yes | Webhook endpoint configuration |
| Models | Yes | Yes | AI/ML model definitions |
| ModelTraining | — | Yes | Model training and inference jobs |
Schema & Mapping
| Resource | Read | Write | Description |
|---|---|---|---|
| Mappings | Yes | Yes | Rosetta Stone schema mappings |
| SchemaPreset | Yes | Yes | Predefined schema templates |
| Attributes | Yes | — | Rosetta Stone normalized attributes |
Billing
| Resource | Read | Write | Description |
|---|---|---|---|
| Billings | Yes | — | Billing and storage usage |
| PaymentMethods | Yes | Yes | Payment method configuration |
| Usage | — | Yes | Platform usage reporting |
Other
| Resource | Read | Write | Description |
|---|---|---|---|
| Contracts | Yes | — | Data contract viewing |
| Uploads | — | Yes | File upload operations |
| DataPlaneLogs | — | Yes | Data plane log submission |
| Commands.Subscriptions.Delivery | Yes | — | Subscription delivery commands and file downloads |