Built-in workspace permission sets and available permissions

Built-in workspace permission sets

Structural comes with the following built-in workspace permission sets.

Manager

Provides complete access to all workspace permissions.

The Manager permission set automatically receives all new workspace permissions.

By default, the Manager workspace permission set is assigned to workspace owners.

Editor

An editor can view and update nearly every aspect of a workspace.

The Editor permission set automatically receives appropriate new workspace permissions.

They cannot rename or delete the workspace, change the connection information, or copy the workspace.

Auditor

Requires an Enterprise license.

An auditor can view the workspace configuration, but cannot make any changes at all to it.

Viewer

Requires an Enterprise license.

Similar to an auditor, a viewer can view but not edit the workspace configuration.

However, they are further restricted in that they cannot:

• View any of the data
• View the Version History
• Download the Privacy Report
• Download job logs

Available workspace permissions

The following tables list the available workspace permissions, and indicate how the permissions apply to the built-in workspace permission sets.

Workspace management and configuration permissions

Permission	Manager	Editor	Auditor	Viewer
Configure workspace settings	✔️
View workspace settings (Automatically granted with Configure workspace settings)	✔️	✔️	✔️	✔️
Copy workspace	✔️
Export and import workspace	✔️	✔️
Delete workspace	✔️
Manage file connector file groups	✔️	✔️
Create child workspaces	✔️

Workspace access permissions

Permission	Manager	Editor	Auditor	Viewer
Share workspace access	✔️	✔️
Transfer workspace ownership	✔️

Table and column configuration permissions

Permission	Manager	Editor	Auditor	Viewer
Preview source data	✔️	✔️	✔️
Preview destination data	✔️	✔️	✔️
Configure column generators	✔️	✔️
Configure column sensitivity	✔️	✔️
Assign table modes	✔️	✔️
Resolve schema change warnings	✔️	✔️

Data generation, tracking, and downloads permissions

Permission	Manager	Editor	Auditor	Viewer
Run data generation	✔️	✔️
Run sensitivity scan	✔️	✔️
Run collection scan	✔️	✔️
Download job logs	✔️	✔️	✔️
Download Privacy Report	✔️	✔️	✔️
View the Protection Audit Trail	✔️	✔️	✔️
Download SqlLdr Files	✔️	✔️

Other data generation configuration permissions

Permission	Manager	Editor	Auditor	Viewer
Decrypt data API	✔️
Configure subsetting	✔️	✔️
Configure virtual foreign keys	✔️	✔️
Configure post-job scripts and webhooks	✔️	✔️