Policy

Overview

Refer to the policy concepts page.

Refer to the Create a Policy guide for additional details.

Each resource has a set of permissions that can be assigned to a policy.

Expand the dropdown below and click on a resource to view their assignable permissions.

Resources

After clicking on a link, expand the Examples dropdown to view the list.

Each org has the following built-in policies for each resource (agent, GVC, etc.):

Policy Name	Description	Target	Permission	Group	Service Account
superusers-RESOURCE	Built-in policy granting full access to the superusers group	All Items	manage	superusers	controlplane
viewers-RESOURCE	Built-in policy granting read-only access to the viewers group	All Items	view	viewers	none

The permissions below are used to define policies together with one or more of the four principal types:

Permission	Description	Implies
create	Create new policies
delete	Delete existing policies
edit	Modify existing policies	view
manage	Full access	create, delete, edit, manage, view
view	Read-only view

Displays the permissions granted to principals for the policy.

To view the CLI documentation for policies, click here.

To view the schema documentation for policies, click here.

placeholder

Contents