Viewing the permissions available for each role
The following table shows the permissions available for each CodeCatalyst role. Use the links to jump to the appropriate set of permissions.
Permission | Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
---|---|---|---|---|---|---|---|
Space permissions |
|||||||
Create space |
|||||||
Edit space billing details |
|||||||
Set up and enable single sign-on |
|||||||
Remove single sign-on |
|||||||
Enable generative AI features for a space |
|||||||
Disable generative AI features for a space |
|||||||
Delete space |
|||||||
Add other users to the Space administrator role |
|||||||
Remove other users from the Space administrator role |
|||||||
Create team |
|||||||
Delete team |
|||||||
Update team |
|||||||
Disable machine resources for the space |
|||||||
Enable machine resources for the space |
|||||||
Create project |
|||||||
Associate an AWS account connection with the space |
|||||||
Update an AWS account connection |
|||||||
Disassociate an AWS account connection from the space |
|||||||
Delete an AWS account connection and remove it from the space |
|||||||
Enable project-restricted account connections in the space ¹ |
|||||||
Disable project-restricted account connections in the space ² |
|||||||
Invite others to the space |
|||||||
Create VPC connection |
|||||||
Edit VPC connection |
|||||||
Delete VPC connection |
|||||||
View logs of activity in the space |
|||||||
View AWS account connections |
|||||||
View incidents for CodeCatalyst |
|||||||
View space |
|
||||||
View teams |
|||||||
View VPC connections |
|||||||
¹ With the Power user role, you can enable project restrictions for an account, but you can only configure access for projects where you are a member. ² With the Power user role, you can disable project restrictions for an account, but you can only configure access for projects where you are a member. |
|||||||
Extensions permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Install extensions |
|||||||
Update extensions |
|||||||
Delete extensions |
|||||||
Connect a GitHub account |
|||||||
Disconnect a GitHub account |
|||||||
Connect a Jira site |
|||||||
Disconnect a Jira site |
|||||||
View configuration details for installed extensions |
|||||||
View extensions |
|||||||
Project permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Edit project settings |
|||||||
Disable machine resources for the project |
|||||||
Enable machine resources for the project |
|||||||
Delete project |
|||||||
Invite users to a project |
|||||||
Change roles of users in a project |
|||||||
Remove users from a project |
|||||||
Add team to a project |
|||||||
Remove team from a project |
|||||||
Change project role of team |
|||||||
View project |
|||||||
View project activity |
|||||||
View teams in project |
|||||||
View blueprints |
|||||||
Source repository permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Create repositories |
|||||||
Link repositories |
|||||||
Unlink repositories |
|||||||
Delete repositories |
|||||||
Edit repository settings |
|||||||
View repositories |
|||||||
View repository settings |
|||||||
Clone repositories |
|||||||
Create branches |
|||||||
Create branch rules |
|||||||
Change default branch |
|||||||
Delete branches |
|||||||
Merge branches |
|||||||
Update branch rules |
|||||||
View branches |
|||||||
View branch rules |
|||||||
Create folders |
|||||||
Delete folders |
|||||||
Edit folders |
|||||||
View folders |
|||||||
Create files |
|||||||
Delete files |
|||||||
Edit files |
|||||||
View files |
|||||||
Create and push commits |
|||||||
View commits |
|||||||
Create pull requests |
|||||||
Create approval rules for pull requests |
|||||||
Override merge requirements for pull requests |
|||||||
Update pull requests |
|||||||
Update approval rules for pull requests |
|||||||
View pull requests |
|||||||
View approval rules for pull requests |
|||||||
Close pull requests |
|||||||
Approve pull requests |
|||||||
Comment on pull requests |
|||||||
Interact with Amazon Q in comments on pull requests |
|||||||
Create a revision for a pull request created by Amazon Q |
|||||||
Link an issue to a pull request |
|||||||
Unlink an issue from a pull request |
|||||||
Dev Environment permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Create your own Dev Environment |
|||||||
Stop your own Dev Environment |
|||||||
Stop Dev Environments created by other users |
|||||||
Resume your own Dev Environment |
|||||||
View your own Dev Environments |
|||||||
View Dev Environments created by other users |
|||||||
Edit your own Dev Environment |
|||||||
Edit Dev Environments created by other users |
|||||||
Delete your own Dev Environment |
|||||||
Delete Dev Environments created by other users |
|||||||
Create a devfile for Dev Environments |
|||||||
Edit a devfile for Dev Environments |
|||||||
Delete a devfile for Dev Environments |
|||||||
View a devfile for Dev Environments |
|||||||
Package repository and package permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Create package repository |
|||||||
View package repositories |
|||||||
Edit package repository |
|||||||
Delete package repository |
|||||||
Create gateway package repository |
|||||||
View gateway package repositories |
|||||||
Delete gateway package repository |
|||||||
Add upstream package repository |
|||||||
Edit search order of upstream repositories |
|||||||
Remove upstream package repository |
|||||||
Connect to a package repository |
|||||||
Read packages from a package repository |
|||||||
Publish packages to a package repository |
|||||||
Read and retain packages from an upstream repository |
|||||||
View packages |
|||||||
View package versions |
|||||||
View package version assets |
|||||||
List package version dependencies |
|||||||
Update package version status |
|||||||
Update package origin configuration |
|||||||
Delete package version |
|||||||
Workflow permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Create workflow |
|||||||
Update workflow |
|||||||
Delete workflow |
|||||||
Start workflow |
|||||||
Stop workflow |
|||||||
Create workflow secrets |
|||||||
Update workflow secrets |
|||||||
Delete workflow secrets |
|||||||
Create environments |
|||||||
Delete environments |
|||||||
Create fleet |
|||||||
Update fleet |
|||||||
Delete fleet |
|||||||
Manage workflow resources in other accounts |
|||||||
Associate an AWS account connection with an environment |
|||||||
Associate a default IAM role with an environment |
|||||||
Associate a VPC connection with an environment |
|||||||
Disassociate a VPC connection with an environment |
|||||||
Associate a VPC-connected environment with a workflow |
|||||||
Disassociate a VPC-connected environment with a workflow |
|||||||
Approve workflow runs |
|||||||
Track a commit in a workflow |
|||||||
View environments |
|||||||
View build action logs |
|||||||
View fleets |
|||||||
View test action logs |
|||||||
View workflow |
|||||||
View workflow runs |
|||||||
View workflow run results |
|||||||
View workflow secrets |
|||||||
Issues permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Create issue |
|||||||
Update issue |
|||||||
View issues |
|||||||
Create task |
|||||||
Update task |
|||||||
View tasks |
|||||||
Archive an issue |
|||||||
Assign an issue to Amazon Q |
|||||||
Interact with Amazon Q in comments on an issue |
|||||||
Unassign Amazon Q from an issue |
|||||||
Recommend tasks for an issue with Amazon Q |
|||||||
Create tasks recommended by Amazon Q |
|||||||
Update issues created by other users |
|||||||
View comments on an issue |
|||||||
Create a comment on an issue |
|||||||
Update a comment on an issue |
|||||||
Create a label |
|||||||
Update a label |
|||||||
View labels |
|||||||
Add a label to an issue |
|||||||
Remove a label from an issue |
|||||||
Create a custom status for issues |
|||||||
Update a custom status |
|||||||
View a custom status |
|||||||
Move a custom status |
|||||||
Deactivate a custom status |
|||||||
Add an attachment to an issue |
|||||||
View an issue attachment |
|||||||
Remove an attachment from an issue |
|||||||
Link an issue to another issue |
|||||||
Unlink an issue from another issue |
|||||||
Update an issue link |
|||||||
View links for an issue |
|||||||
Link a pull request to an issue |
|||||||
Unlink a pull request from an issue |
|||||||
Link a Jira project |
|||||||
Unlink a Jira project |
|||||||
Blueprint permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Create custom blueprint project |
|||||||
Publish a preview custom blueprint |
|||||||
Publish a custom blueprint |
|||||||
Add a custom blueprint to a space blueprints catalog |
|||||||
Remove a custom blueprint from a space blueprints catalog |
|||||||
Manage the publishing permissions for a custom blueprint |
|||||||
Manage the catalog version for a custom blueprint |
|||||||
Update a custom blueprint |
|||||||
Delete a custom blueprint version |
|||||||
Delete a custom blueprint |
|||||||
Convert a source repository to a custom blueprint |
|||||||
Add a custom blueprint to a project |
|||||||
Disassociate a custom blueprint from a project |
|||||||
Update the version of an applied custom blueprint |
|||||||
Edit the settings of a custom blueprint |
|||||||
View published custom blueprints |
|||||||
Notifications permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Configure notification channel |
|||||||
Remove notification channel |
|||||||
Edit notification settings |
|||||||
View notification settings |
|||||||
Automatically receive notifications about CodeCatalyst incidents |
|||||||
Configure email notifications for your associated email account |
|||||||
Search permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
Search inside a project |
|||||||
Search across the space |