# Available permissions

## **Available global permissions** <a href="#permissions-global" id="permissions-global"></a>

The following tables list the available global permissions, and indicate how the permissions apply to the [built-in global permission sets](/app/admin/tonic-user-access/permissions/permission-sets-builtin.md#permission-sets-builtin-global).

### **User management permissions** <a href="#permissions-global-user-management" id="permissions-global-user-management"></a>

<table data-full-width="false"><thead><tr><th width="167" valign="top">Permission</th><th width="138.33333333333331" valign="top">General User</th><th width="293" valign="top">Admin and Admin (Environment)</th><th width="151.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create and manage custom permission sets</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage user access to Tonic Structural and to any workspace</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Reset Tonic Structural user passwords</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### **Workspace management permissions** <a href="#permissions-global-workspace-management" id="permissions-global-workspace-management"></a>

<table><thead><tr><th width="177" valign="top">Permission</th><th width="139.33333333333331" valign="top">General User</th><th width="277" valign="top">Admin and Admin (Environment)</th><th width="156.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create workspaces</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">View organization users</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Copy any workspace</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### **Tonic administration permissions** <a href="#permissions-global-tonic-administration" id="permissions-global-tonic-administration"></a>

<table><thead><tr><th width="177" valign="top">Permission</th><th width="135.33333333333331" valign="top">General User</th><th width="285" valign="top">Admin and Admin (Environment)</th><th width="146.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Update the Tonic Structural license key</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Update Tonic Structural</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">View summary usage metrics</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Enable diagnostic logging and uploading logs directly to Tonic.ai</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### **Configuration management permissions** <a href="#permissions-global-configuration-management" id="permissions-global-configuration-management"></a>

<table><thead><tr><th width="179" valign="top">Permission</th><th width="135.33333333333331" valign="top">General User</th><th width="282" valign="top">Admin and Admin (Environment)</th><th width="157.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create and manage generator presets</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Create and manage sensitivity rules</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Configure Tonic Structural data encryption</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage environment settings</td><td valign="top"></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage secrets managers</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Manage organization settings</td><td valign="top"></td><td valign="top"></td><td valign="top">✔️</td></tr></tbody></table>

## **Available workspace permissions**

The following tables list the available workspace permissions, and indicate how the permissions apply to the [built-in workspace permission sets](/app/admin/tonic-user-access/permissions/permission-sets-builtin.md#permission-sets-builtin-workspace).

### **Workspace management and configuration permissions**

<table><thead><tr><th valign="top">Permission</th><th width="134" valign="top">Manager</th><th width="90" valign="top">Editor</th><th width="106" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Configure workspace settings</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top"><p>View workspace settings<br></p><p>(Automatically granted with Configure workspace settings)</p></td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Copy workspace</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Export and import workspace</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Delete workspace</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Manage file connector file groups</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Create child workspaces</td><td valign="top">✔️</td><td valign="top"></td><td valign="top"><br></td><td valign="top"><br></td></tr></tbody></table>

### **Workspace access permissions**

<table><thead><tr><th valign="top">Permission</th><th width="141" valign="top">Manager</th><th width="94" valign="top">Editor</th><th width="100" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Share workspace access</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Transfer workspace ownership</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr></tbody></table>

### **Table and column configuration permissions**

<table><thead><tr><th valign="top">Permission</th><th width="135" valign="top">Manager</th><th width="99" valign="top">Editor</th><th width="92" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Preview source data</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">Preview destination data</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">Configure column generators</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Configure column sensitivity</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Assign table modes</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Resolve schema change warnings</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr></tbody></table>

### **Data generation, tracking, and downloads permissions**

<table><thead><tr><th valign="top">Permission</th><th width="120" valign="top">Manager</th><th width="85" valign="top">Editor</th><th width="96" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Run data generation</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Run sensitivity scan</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"></td><td valign="top"></td></tr><tr><td valign="top">Run collection scan</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"></td><td valign="top"></td></tr><tr><td valign="top">Download job logs</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">Download Privacy Report</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">View the Protection Audit Trail</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">Download SqlLdr Files</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"></td><td valign="top"></td></tr></tbody></table>

### **Other data generation configuration permissions**

<table><thead><tr><th valign="top">Permission</th><th width="115" valign="top">Manager</th><th width="82" valign="top">Editor</th><th width="92" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Decrypt data API</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Configure subsetting</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Configure virtual foreign keys</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Configure post-job scripts and webhooks</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tonic.ai/app/admin/tonic-user-access/permissions/available-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.