Available permissions

Available global permissions

The following tables list the available global permissions, and indicate how the permissions apply to the built-in global permission sets.

User management permissions

Permission	General User	Admin and Admin (Environment)	Account Admin
Create and manage custom permission sets		✔️
Manage user access to Tonic Structural and to any workspace		✔️	✔️
Reset Tonic Structural user passwords		✔️	✔️

Workspace management permissions

Permission	General User	Admin and Admin (Environment)	Account Admin
Create workspaces	✔️	✔️	✔️
View organization users	✔️	✔️	✔️
Copy any workspace		✔️	✔️

Tonic administration permissions

Permission	General User	Admin and Admin (Environment)	Account Admin
Update the Tonic Structural license key		✔️
Update Tonic Structural		✔️
View summary usage metrics		✔️	✔️
Enable diagnostic logging and uploading logs directly to Tonic.ai		✔️	✔️

Configuration management permissions

Permission	General User	Admin and Admin (Environment)	Account Admin
Create and manage generator presets		✔️	✔️
Create and manage sensitivity rules		✔️	✔️
Configure Tonic Structural data encryption		✔️
Manage environment settings		✔️
Manage secrets managers		✔️	✔️

Available workspace permissions

The following tables list the available workspace permissions, and indicate how the permissions apply to the built-in workspace permission sets.

Workspace management and configuration permissions

Permission	Manager	Editor	Auditor	Viewer
Configure workspace settings	✔️
View workspace settings (Automatically granted with Configure workspace settings)	✔️	✔️	✔️	✔️
Copy workspace	✔️
Export and import workspace	✔️	✔️
Delete workspace	✔️
Manage file connector file groups	✔️	✔️
Create child workspaces	✔️

Workspace access permissions

Permission	Manager	Editor	Auditor	Viewer
Share workspace access	✔️	✔️
Transfer workspace ownership	✔️

Table and column configuration permissions

Permission	Manager	Editor	Auditor	Viewer
Preview source data	✔️	✔️	✔️
Preview destination data	✔️	✔️	✔️
Configure column generators	✔️	✔️
Configure column sensitivity	✔️	✔️
Assign table modes	✔️	✔️
Resolve schema change warnings	✔️	✔️

Data generation, tracking, and downloads permissions

Permission	Manager	Editor	Auditor	Viewer
Run data generation	✔️	✔️
Run sensitivity scan	✔️	✔️
Run collection scan	✔️	✔️
Download job logs	✔️	✔️	✔️
Download Privacy Report	✔️	✔️	✔️
View the Protection Audit Trail	✔️	✔️	✔️
Download SqlLdr Files	✔️	✔️

Other data generation configuration permissions

Permission	Manager	Editor	Auditor	Viewer
Decrypt data API	✔️
Configure subsetting	✔️	✔️
Configure virtual foreign keys	✔️	✔️
Configure post-job scripts and webhooks	✔️	✔️