Built-in global permission sets and available permissions

Built-in global permission sets

Structural comes with the following built-in global permission sets.

Admin

For self-hosted instances only.

Provides complete access to all global permissions.

The Admin permission set automatically receives any new global permissions.

Admin (Environment)

For self-hosted instances only.

Identical to the Admin permission set.

Only assigned to users and groups listed in the value of the environment setting TONIC_ADMINISTRATORS.

General User

Allows users to create workspaces.

Also allows them to find other users in the organization, which is needed to share and transfer workspace, and to configure access to global permission sets.

By default, the General User permission set is assigned to all Structural users and SSO groups.

Account Admin

For Structural Cloud only.

An Account Admin is associated with a Structural Cloud organization.

An Account Admin can remove and reset user passwords for the users in the organization. They can also manage access to any workspace for the organization, set organization settings, and download the usage report.

Available global permissions

The following tables list the available global permissions, and indicate how the permissions apply to the built-in global permission sets.

User management permissions

Permission	General User	Admin and Admin (Environment)	Account Admin
Create and manage custom permission sets		✔️
Manage user access to Tonic Structural and to any workspace		✔️	✔️
Reset Tonic Structural user passwords		✔️	✔️

Workspace management permissions

Permission	General User	Admin and Admin (Environment)	Account Admin
Create workspaces	✔️	✔️	✔️
View organization users	✔️	✔️	✔️
Copy any workspace		✔️	✔️

Tonic administration permissions

Permission	General User	Admin and Admin (Environment)	Account Admin
Update the Tonic Structural license key		✔️
Update Tonic Structural		✔️
View summary usage metrics		✔️	✔️
Enable diagnostic logging and uploading logs directly to Tonic.ai		✔️	✔️

Configuration management permissions

Permission	General User	Admin and Admin (Environment)	Account Admin
Create and manage generator presets		✔️	✔️
Create and manage sensitivity rules		✔️	✔️
Configure Tonic Structural data encryption		✔️
Manage environment settings		✔️
Manage secrets managers		✔️	✔️
Manage organization settings			✔️