> ## Documentation Index
> Fetch the complete documentation index at: https://docs.narrative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions

> Complete reference for all API key permission resources and their available access levels

This page lists every permission resource available when configuring API keys. For an explanation of how permissions work, see [API Key Permissions](/concepts/security/api-key-permissions).

## Access levels

Each permission pairs a resource with one of two access levels:

| Access Level | Capabilities                         |
| ------------ | ------------------------------------ |
| **Read**     | View, list, and retrieve resources   |
| **Write**    | Create, update, and delete resources |

Not all resources support both access levels. The tables below indicate which access levels are available for each resource.

## Core Data

| Resource      | Read | Write | Description                                             |
| ------------- | ---- | ----- | ------------------------------------------------------- |
| Datasets      | Yes  | Yes   | Dataset metadata, samples, statistics, and access rules |
| DataStreams   | Yes  | Yes   | Data stream ingestion and publishing                    |
| Views         | Yes  | Yes   | Saved view definitions                                  |
| Queries       | Yes  | Yes   | NQL query management and execution                      |
| Subscriptions | Yes  | Yes   | Data subscriptions and NQL operations                   |

## Infrastructure

| Resource            | Read | Write | Description                                       |
| ------------------- | ---- | ----- | ------------------------------------------------- |
| ComputePools        | Yes  | Yes   | Compute pool registration and configuration       |
| DataPlanes          | Yes  | Yes   | Data plane configuration and encryption materials |
| Connections         | Yes  | Yes   | External system connections                       |
| Destinations        | Yes  | Yes   | Data delivery destinations                        |
| EncryptionMaterials | —    | Yes   | Encryption key management                         |
| Resources           | Yes  | Yes   | Platform resource buckets                         |

## Applications

| Resource           | Read | Write | Description                                  |
| ------------------ | ---- | ----- | -------------------------------------------- |
| AppInvites         | Yes  | Yes   | App invite creation and lifecycle management |
| Apps               | Yes  | Yes   | Application and interface management         |
| AppProfiles        | Yes  | Yes   | Application profiles                         |
| AppEvents          | —    | Yes   | Application event tracking                   |
| Installations      | Yes  | Yes   | Application installations                    |
| ProfileStoreSchema | Yes  | Yes   | Profile store schema definitions             |
| ProfileStoreData   | —    | Yes   | Profile store data records                   |

## Identity & Access

| Resource     | Read | Write | Description                        |
| ------------ | ---- | ----- | ---------------------------------- |
| AccessTokens | Yes  | Yes   | API key management                 |
| Users        | —    | Yes   | User profile updates               |
| CompanyInfo  | Yes  | Yes   | Organization settings and metadata |

## Automation

| Resource      | Read | Write | Description                       |
| ------------- | ---- | ----- | --------------------------------- |
| Jobs          | Yes  | Yes   | Job execution and status          |
| Workflows     | Yes  | Yes   | Automated pipeline definitions    |
| Webhooks      | Yes  | Yes   | Webhook endpoint configuration    |
| Models        | Yes  | Yes   | AI/ML model definitions           |
| ModelTraining | —    | Yes   | Model training and inference jobs |

## Schema & Mapping

| Resource     | Read | Write | Description                         |
| ------------ | ---- | ----- | ----------------------------------- |
| Mappings     | Yes  | Yes   | Rosetta Stone schema mappings       |
| SchemaPreset | Yes  | Yes   | Predefined schema templates         |
| Attributes   | Yes  | —     | Rosetta Stone normalized attributes |

## Billing

| Resource       | Read | Write | Description                  |
| -------------- | ---- | ----- | ---------------------------- |
| Billings       | Yes  | —     | Billing and storage usage    |
| PaymentMethods | Yes  | Yes   | Payment method configuration |
| Usage          | —    | Yes   | Platform usage reporting     |

## Other

| Resource                        | Read | Write | Description                                       |
| ------------------------------- | ---- | ----- | ------------------------------------------------- |
| Contracts                       | Yes  | —     | Data contract viewing                             |
| Uploads                         | —    | Yes   | File upload operations                            |
| DataPlaneLogs                   | —    | Yes   | Data plane log submission                         |
| Commands.Subscriptions.Delivery | Yes  | —     | Subscription delivery commands and file downloads |