# Available permissions

## **Available global permissions** <a href="#permissions-global" id="permissions-global"></a>

The following tables list the available global permissions, and indicate how the permissions apply to the [built-in global permission sets](https://docs.tonic.ai/app/admin/tonic-user-access/permission-sets-builtin#permission-sets-builtin-global).

### **User management permissions** <a href="#permissions-global-user-management" id="permissions-global-user-management"></a>

<table data-full-width="false"><thead><tr><th width="167" valign="top">Permission</th><th width="138.33333333333331" valign="top">General User</th><th width="293" valign="top">Admin and Admin (Environment)</th><th width="151.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create and manage custom permission sets</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage user access to Tonic Structural and to any workspace</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Reset Tonic Structural user passwords</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### **Workspace management permissions** <a href="#permissions-global-workspace-management" id="permissions-global-workspace-management"></a>

<table><thead><tr><th width="177" valign="top">Permission</th><th width="139.33333333333331" valign="top">General User</th><th width="277" valign="top">Admin and Admin (Environment)</th><th width="156.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create workspaces</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">View organization users</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Copy any workspace</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### **Tonic administration permissions** <a href="#permissions-global-tonic-administration" id="permissions-global-tonic-administration"></a>

<table><thead><tr><th width="177" valign="top">Permission</th><th width="135.33333333333331" valign="top">General User</th><th width="285" valign="top">Admin and Admin (Environment)</th><th width="146.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Update the Tonic Structural license key</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Update Tonic Structural</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">View summary usage metrics</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Enable diagnostic logging and uploading logs directly to Tonic.ai</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr></tbody></table>

### **Configuration management permissions** <a href="#permissions-global-configuration-management" id="permissions-global-configuration-management"></a>

<table><thead><tr><th width="179" valign="top">Permission</th><th width="135.33333333333331" valign="top">General User</th><th width="282" valign="top">Admin and Admin (Environment)</th><th width="157.66666666666674" valign="top">Account Admin</th></tr></thead><tbody><tr><td valign="top">Create and manage generator presets</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Create and manage sensitivity rules</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Configure Tonic Structural data encryption</td><td valign="top"><br></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage environment settings</td><td valign="top"></td><td valign="top">✔️</td><td valign="top"></td></tr><tr><td valign="top">Manage secrets managers</td><td valign="top"></td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Manage organization settings</td><td valign="top"></td><td valign="top"></td><td valign="top">✔️</td></tr></tbody></table>

## **Available workspace permissions**

The following tables list the available workspace permissions, and indicate how the permissions apply to the [built-in workspace permission sets](https://docs.tonic.ai/app/admin/tonic-user-access/permission-sets-builtin#permission-sets-builtin-workspace).

### **Workspace management and configuration permissions**

<table><thead><tr><th valign="top">Permission</th><th width="134" valign="top">Manager</th><th width="90" valign="top">Editor</th><th width="106" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Configure workspace settings</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top"><p>View workspace settings<br></p><p>(Automatically granted with Configure workspace settings)</p></td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td></tr><tr><td valign="top">Copy workspace</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Export and import workspace</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Delete workspace</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Manage file connector file groups</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Create child workspaces</td><td valign="top">✔️</td><td valign="top"></td><td valign="top"><br></td><td valign="top"><br></td></tr></tbody></table>

### **Workspace access permissions**

<table><thead><tr><th valign="top">Permission</th><th width="141" valign="top">Manager</th><th width="94" valign="top">Editor</th><th width="100" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Share workspace access</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Transfer workspace ownership</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr></tbody></table>

### **Table and column configuration permissions**

<table><thead><tr><th valign="top">Permission</th><th width="135" valign="top">Manager</th><th width="99" valign="top">Editor</th><th width="92" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Preview source data</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">Preview destination data</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">Configure column generators</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Configure column sensitivity</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Assign table modes</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Resolve schema change warnings</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr></tbody></table>

### **Data generation, tracking, and downloads permissions**

<table><thead><tr><th valign="top">Permission</th><th width="120" valign="top">Manager</th><th width="85" valign="top">Editor</th><th width="96" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Run data generation</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Run sensitivity scan</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"></td><td valign="top"></td></tr><tr><td valign="top">Run collection scan</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"></td><td valign="top"></td></tr><tr><td valign="top">Download job logs</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">Download Privacy Report</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">View the Protection Audit Trail</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td></tr><tr><td valign="top">Download SqlLdr Files</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"></td><td valign="top"></td></tr></tbody></table>

### **Other data generation configuration permissions**

<table><thead><tr><th valign="top">Permission</th><th width="115" valign="top">Manager</th><th width="82" valign="top">Editor</th><th width="92" valign="top">Auditor</th><th valign="top">Viewer</th></tr></thead><tbody><tr><td valign="top">Decrypt data API</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Configure subsetting</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Configure virtual foreign keys</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr><tr><td valign="top">Configure post-job scripts and webhooks</td><td valign="top">✔️</td><td valign="top">✔️</td><td valign="top"><br></td><td valign="top"><br></td></tr></tbody></table>