API Permissions Reference
This topic gives you details of the Permissions available in the Harness system for API Keys and Service Accounts.
Service Account
The following table lists permissions for Service Account. To know more about Service Accounts, see Add and Manage Service Accounts.
Scope | Action |
Account |
API Key
The following table lists the permissions for Service Account. To know more about Service Accounts, see Add and Manage API Keys.
Scope | Action |
Account/Org/Project | core_serviceaccount_manageapikey |
Harness API Permissions
The following table lists the permissions for accessing the Harness APIs.
Scope | Permission Identifier | Description |
Account/Org/Project | core_project_view | View Projects |
Account/Org/Project | core_project_create | Create Projects |
Account/Org/Project | core_project_edit | Edit Projects |
Account/Org/Project | core_project_delete | Delete Projects |
Account/Org | core_organization_view | View Organizations |
Account/Org | core_organization_create | Create Organizations |
Account/Org | core_organization_edit | Edit Organizations |
Account/Org | core_organization_delete | Delete Organizations |
Account | core_account_view | View Account |
Account | core_account_edit | Edit Account |
Account | core_secret_view | View Secrets |
Account/Org/Project | core_secret_edit | Create or Edit Secrets |
Account/Org/Project | core_secret_access | Access Secrets |
Account/Org/Project | core_secret_delete | Delete Secrets |
Account/Org/Project | core_connector_view | View Connectors |
Account/Org/Project | core_connector_edit | Create or Edit Connectors |
Account/Org/Project | core_connector_access | Access Connectors |
Account/Org/Project | core_connector_delete | Delete Connectors |
Account | core_smtp_view | View SMTP Config |
Account | core_smtp_edit | Create or Edit SMTP Config |
Account | core_smtp_delete | Delete SMTP Config |
Account/Org/Project | core_delegate_view | View Delegates |
Account/Org/Project | core_delegate_edit | Create or Edit Delegates |
Account/Org/Project | core_delegate_delete | Delete Delegates |
Account/Org/Project | core_delegateconfiguration_view | View Delegate Configurations |
Account/Org/Project | core_delegateconfiguration_edit | Create/Edit Delegate Configurations |
Account/Org/Project | core_delegateconfiguration_delete | Delete Delegate Configurations |
Account/Org/Project | core_pipeline_view | View Pipelines |
Account/Org/Project | core_pipeline_edit | Create/Edit Pipelines |
Account/Org/Project | core_pipeline_delete | Delete Pipelines |
Account/Org/Project | core_pipeline_execute | Run Pipelines |
Account/Org/Project | core_service_view | View Services |
Account/Org/Project | core_service_edit | Create/Edit Services |
Account/Org/Project | core_service_delete | Delete Services |
Account/Org/Project | core_service_access | Runtime access to Services |
Account/Org/Project | core_environment_view | View Environments |
Account/Org/Project | core_environment_edit | Create/Edit Environments |
Account/Org/Project | core_environment_delete | Delete Environments |
Account/Org/Project | core_environment_access | Runtime access to Environments |
Account/Org/Project | core_environmentgroup_view | View Environment Groups |
Account/Org/Project | core_environmentgroup_edit | Create/Edit Environment Groups |
Account/Org/Project | core_environmentgroup_delete | Delete Environment Groups |
Account/Org/Project | core_environmentgroup_access | Runtime access to Environment Groups |
Account/Org/Project | core_audit_view | View Audits |
Account/Org/Project | core_usergroup_view | View User Groups |
Account/Org/Project | core_usergroup_manage | Manage User Groups |
Account/Org/Project | core_user_view | View Users |
Account/Org/Project | core_user_manage | Manage Users |
Account/Org/Project | core_role_view | View Roles |
Account/Org/Project | core_role_edit | Create/Edit Roles |
Account/Org/Project | core_role_delete | Delete Roles |
Account/Org/Project | core_resourcegroup_view | View Resource Groups |
Account/Org/Project | core_resourcegroup_edit | Create/Edit Resource Groups |
Account/Org/Project | core_resourcegroup_delete | Delete Resource Groups |
Account/Org/Project | core_user_invite | Invite Users |
Account/Org/Project | core_license_view | View License |
Account/Org/Project | core_license_edit | Edit License |
Account/Org/Project | core_serviceaccount_view | View Service Account details |
Account/Org/Project | core_serviceaccount_edit | Edit Service Account details |
Account/Org/Project | core_serviceaccount_delete | Delete Service Account details |
Account/Org/Project | core_serviceaccount_manageapikey | Manage API keys for Service Account |
Account | core_authsetting_view | View Auth settings |
Account | core_authsetting_edit | Edit Auth settings |
Account | core_authsetting_delete | Delete Auth settings |
Account/Org/Project | ff_featureflag_edit | Create/Edit Feature Flags |
Account/Org/Project | ff_featureflag_delete | Delete Feature Flags |
Account/Org/Project | ff_featureflag_view | View Feature Flags |
Account/Org/Project | ff_targetgroup_view | View Target Groups |
Account/Org/Project | ff_targetgroup_edit | Create/Edit Target Groups |
Account/Org/Project | ff_targetgroup_delete | Delete Target Groups |
Account/Org/Project | ff_environment_targetGroupEdit | Edit Target Groups |
Account/Org/Project | ff_target_view | View Targets |
Account/Org/Project | ff_environment_apiKeyView | View Feature Flag Environment API Keys |
Account/Org/Project | ff_environment_apiKeyCreate | Create Feature Flag Environment API Keys |
Account/Org/Project | ff_environment_apiKeyDelete | Delete Feature Flag Environment API Keys |
Account/Org/Project | ff_environment_edit | Edit Feature Flag Environment Configuration |
Account/Org/Project | ff_environment_view | View Feature Flag Environment Configuration |
Account/Org/Project | ff_featureflag_toggle | Toggle a Feature Flag on/off |
Account/Org | core_dashboards_view | View Dashboards |
Account/Org | core_dashboards_edit | Edit Dashboards |
Account/Org/Project | core_template_view | View Templates |
Account/Org/Project | core_template_copy | Copy Templates |
Account/Org/Project | core_template_edit | Edit Templates |
Account/Org/Project | core_template_delete | Delete Templates |
Account/Org/Project | core_template_access | Access Templates |
Account/Org/Project | core_governancePolicy_edit | Create/Edit Policies |
Account/Org/Project | core_governancePolicy_view | View Policies |
Account/Org/Project | core_governancePolicy_delete | Delete Policies |
Account/Org/Project | core_governancePolicySets_edit | Create/Edit Policy Sets |
Account/Org/Project | core_governancePolicySets_view | View Policy Sets |
Account/Org/Project | core_governancePolicySets_delete | Delete Policy Sets |
Account/Org/Project | core_governancePolicySets_evaluate | Evaluate Policy Sets |
Account/Org/Project | chi_monitoredservice_view | View Monitored Services |
Account/Org/Project | chi_monitoredservice_edit | Create/Edit Monitored Services |
Account/Org/Project | chi_monitoredservice_delete | Delete Monitored Services |
Account/Org/Project | chi_monitoredservice_toggle | Toggle Monitored Services on/off |
Account/Org/Project | chi_slo_view | View SLOs |
Account/Org/Project | chi_slo_edit | Create/Edit SLOs |
Account/Org/Project | chi_slo_delete | Delete SLOs |
Account/Org/Project | gitops_agent_view | View GitOps Agents |
Account/Org/Project | gitops_agent_edit | Edit GitOps Agents |
Account/Org/Project | gitops_agent_delete | Delete GitOps Agents |
Account/Org/Project | gitops_application_view | View GitOps Applications |
Account/Org/Project | gitops_application_edit | Edit GitOps Applications |
Account/Org/Project | gitops_application_delete | Delete GitOps Applications |
Account/Org/Project | gitops_application_sync | Syns GitOps Applications |
Account/Org/Project | gitops_repository_view | View GitOps Repositories |
Account/Org/Project | gitops_repository_edit | Edit GitOps Repositories |
Account/Org/Project | gitops_repository_delete | Delete GitOps Repositories |
Account/Org/Project | gitops_cluster_view | View GitOps Clusters |
Account/Org/Project | gitops_cluster_edit | Edit GitOps Clusters |
Account/Org/Project | gitops_cluster_delete | Delete GitOps Clusters |
Account/Org/Project | gitops_gpgkey_view | View GitOps GPG keys |
Account/Org/Project | gitops_gpgkey_edit | Edit GitOps GPG keys |
Account/Org/Project | gitops_gpgkey_delete | Delete GitOps GPG keys |
Account/Org/Project | gitops_cert_view | View GitOps Certificate |
Account/Org/Project | gitops_cert_edit | Edit GitOps Certificate |
Account/Org/Project | gitops_cert_delete | Delete GitOps Certificate |
Account/Org/Project | sto_testtarget_view | View Test Targets |
Account/Org/Project | sto_testtarget_edit | Edit Test Targets |
Account/Org/Project | sto_exemption_view | View Exemptions |
Account/Org/Project | sto_exemption_create | Create Exemptions |
Account/Org/Project | sto_exemption_approve | Approve Exemptions |
Account/Org/Project | sto_issue_view | View Security Issues |
Account/Org/Project | sto_scan_view | View Security Scans |
Account/Org/Project | core_file_view | View Files |
Account/Org/Project | core_file_edit | Edit Files |
Account/Org/Project | core_file_delete | Delete Files |
Account/Org/Project | core_file_access | Access Files |
Account/Org/Project | core_variable_view | View Variables |
Account/Org/Project | core_variable_edit | Edit Variables |
Account/Org/Project | core_variable_delete | Delete Variables |
Account/Org/Project | chaos_chaoshub_view | View Chaos Hubs |
Account/Org/Project | chaos_chaoshub_edit | Edit Chaos Hubs |
Account/Org/Project | chaos_chaoshub_delete | Delete Chaos Hubs |
Account/Org/Project | chaos_chaosinfrastructure_view | View Chaos Infrastructures |
Account/Org/Project | chaos_chaosinfrastructure_edit | Edit Chaos Infrastructures |
Account/Org/Project | chaos_chaosinfrastructure_delete | Delete Chaos Infrastructures |
Account/Org/Project | chaos_chaosexperiment_view | View Chaos Experiments |
Account/Org/Project | chaos_chaosexperiment_edit | Edit Chaos Experiments |
Account/Org/Project | chaos_chaosexperiment_delete | Delete Chaos Experiments |
Account/Org/Project | chaos_chaosgameday_view | View Chaos GameDay |
Account/Org/Project | chaos_chaosgameday_edit | Edit Chaos GameDay |
Account/Org/Project | chaos_chaosgameday_delete | Delete Chaos GameDay |
Account/Org/Project | core_setting_view | View Settings |
Account/Org/Project | core_setting_edit | Edit Settings |
Account | ccm_perspective_view | View CCM Perspective |
Account | ccm_perspective_edit | Edit CCM Perspective |
Account | ccm_perspective_delete | Delete CCM Perspective |
Account | ccm_budget_view | View CCM Budgets |
Account | ccm_budget_edit | Edit CCM Budgets |
Account | ccm_budget_delete | Delete CCM Budgets |
Account | ccm_costCategory_view | View CCM Cost Category |
Account | ccm_costCategory_edit | Create/Edit CCM Cost Category |
Account | ccm_costCategory_delete | Delete CCM Cost Category |
Account | ccm_autoStoppingRule_view | View CCM Auto stopping Rules |
Account | ccm_autoStoppingRule_edit | Create/Edit CCM Auto stopping Rules |
Account | ccm_autoStoppingRule_delete | Delete CCM Auto stopping Rules |
Account | ccm_folder_view | View CCM Folders |
Account | ccm_folder_edit | Create/Edit CCM Folders |
Account | ccm_folder_delete | Delete CCM Folders |
Account | ccm_loadBalancer_view | View CCM Load Balancers |
Account | ccm_loadBalancer_edit | Create/Edit CCM Load Balancers |
Account | ccm_loadBalancer_delete | Delete CCM Load Balancers |
Account | ccm_overview_view | View CCM Overview page |
Account/Org/Project | core_deploymentfreeze_manage | Manage Deployment Freeze |
Account/Org/Project | core_deploymentfreeze_override | Override a Deployment Freeze |
Account/Org/Project | core_deploymentfreeze_global | Global Deployment Freeze |