Built-in global permission sets and available permissions

Built-in global permission sets

Structural comes with the following built-in global permission sets.

Admin

For self-hosted instances only.

Provides complete access to all global permissions.

The Admin permission set automatically receives any new global permissions.

Admin (Environment)

For self-hosted instances only.

Identical to the Admin permission set.

Only assigned to users and groups listed in the value of the environment setting TONIC_ADMINISTRATORS.

General User

The General User permission set does not contain any permissions. It identifies a user as a member of an organization.

By default, the General User permission set is assigned to all Structural users and SSO groups.

Account Admin

For Structural Cloud only.

An Account Admin is associated with a Structural Cloud organization.

An Account Admin can remove and reset user passwords for the users in the organization. They can also manage access to any workspace for the organization, set organization settings, and download the usage report.

Available global permissions

The following tables list the available global permissions, and indicate how the permissions apply to the built-in global permission sets.

User management permissions

Permission	Admin and Admin (Environment)	Account Admin
Create and manage custom permission sets (global)	✔️
Manage user access to Tonic Structural	✔️	✔️
View organization users	✔️	✔️
Reset Tonic Structural user passwords	✔️	✔️

Tonic administration permissions

Permission	Admin and Admin (Environment)	Account Admin
Update the Tonic Structural license key	✔️
Update Tonic Structural	✔️
View summary usage metrics	✔️	✔️

Configuration management permissions

Permission	Admin and Admin (Environment)	Account Admin
Configure Tonic Structural data encryption	✔️
Manage environment settings	✔️
Manage organization settings		✔️