diff --git a/docs/organizations/roles-and-permissions-for-organizations.md b/docs/organizations/roles-and-permissions-for-organizations.md index 73d6736cca..914a8dc002 100644 --- a/docs/organizations/roles-and-permissions-for-organizations.md +++ b/docs/organizations/roles-and-permissions-for-organizations.md @@ -13,12 +13,14 @@ Organization admins can also grant additional permissions: - To roles, by [configuring repository management permissions](#change-analysis-configuration) - To individual members, by [assigning the organization manager role](#managing-the-organization-manager-role) -To review the permissions granted by each role, see the tables for each Git provider: +To find your Codacy role, see the roles for your Git provider: - [Permissions for GitHub](#permissions-for-github) - [Permissions for GitLab](#permissions-for-gitlab) - [Permissions for Bitbucket](#permissions-for-bitbucket) +Then see what that role can do in [Permissions by Codacy role](#permissions-by-codacy-role). + To list and manage the members of your Codacy organization, see the [Managing people](managing-people.md) page. ## Configuring repository management permissions {: id="change-analysis-configuration"} @@ -42,7 +44,7 @@ To change this, open your organization **Settings**, page **Roles and permission To grant an organization member additional permissions, you can assign that member the organization manager role. This role isn't influenced by a member's Git provider role. -To review the additional permissions granted by the organization manager role, see the tables for each Git provider ([GitHub](#permissions-for-github), [GitLab](#permissions-for-gitlab), [Bitbucket](#permissions-for-bitbucket)). +To review the additional permissions granted by the organization manager role, see [Organization manager](#organization-manager). !!! note Organization managers can access the **Policies** and **Integrations** settings sections of your organization and can therefore impact some repository settings for all repositories of your organization, even repositories that they can't access on the Git provider. However, they can't access the repositories themselves and can only see the repository names. @@ -72,489 +74,86 @@ To revoke the organization manager role: ## Permissions for GitHub -The table below maps the GitHub Cloud and GitHub Enterprise roles to the corresponding Codacy roles and the operations that they're allowed to perform: +The following GitHub Cloud and GitHub Enterprise roles map to these Codacy roles: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
GitHub roleOutside
collaborator1		Repository
read		Repository
triage		Repository
write		Repository
maintain		Repository
admin		-Organization
Owner
Codacy role-Repository
read		Repository
write		Repository
admin		Organization
manager		Organization
admin
Join organizationNoYes2Yes2Yes2YesYes2
View and follow private repositoryNoYesYesYesYesYes
Access Security and risk managementNoYes3Yes3Yes3YesYes
Access AI Risk Hub OverviewNoYesYesYesYesYes
Access AI Risk Hub AI assets and Tools & workflowsNoNoNoNoYesYes
Ignore issues and files,
configure code patterns,
reanalyze branches and pull requests		NoConfigurableConfigurableYesInherits original permissionYes
Upload coverage using an account API token,
see the coverage report logs		NoNoYesYesInherits original permissionYes
Configure repository Git provider integration settingsNoNoNoYesInherits original permissionYes
Configure repository quality gates and goalsNoNoNoYesInherits original permissionYes
Enable repository analysis to run on a local build server, manage repository API tokensNoNoNoYesInherits original permissionYes
Add and remove repositoryNoNoNoYes4Inherits original permissionYes
Manage organization gate policies and coding standardsNoNoNoNoYesYes
Configure organization default settings for Git provider integrationNoNoNoNoYesYes
Obtain audit logs for organization events5NoNoNoNoYesYes
Invite and accept members,
modify billing		NoNoNoNoNoYes
Assign and revoke the organization manager roleNoNoNoNoNoYes
+| GitHub role | Codacy role | +|---|---| +| Outside collaborator1 | Not supported as a Codacy role | +| Repository read, Repository triage | [Repository read](#repository-read) | +| Repository write, Repository maintain | [Repository write](#repository-write) | +| Repository admin | [Repository admin](#repository-admin) | +| — (assigned directly on Codacy) | [Organization manager](#organization-manager) | +| Organization Owner | [Organization admin](#organization-admin) | -1: Outside collaborators aren't supported as members of organizations on Codacy. You can still [add outside collaborators to Codacy](managing-people.md#adding-people) so that Codacy analyzes their commits to private repositories, but they won't be able to join your Codacy organization. -2: Joining an organization may need an approval depending on your setting for [accepting new people](changing-your-plan-and-billing.md#allowing-new-people-to-join-your-organization). -3: These users can only see security items originating from Codacy repositories that they follow. -4: Requires that an organization owner has given the Codacy GitHub App access to the repositories to add or remove. -5: [Audit logs](./audit-logs-for-organizations.md) are available only on [Business plan](https://www.codacy.com/pricing). +1: Outside collaborators aren't supported as members of organizations on Codacy. You can still [add outside collaborators to Codacy](managing-people.md#adding-people) so that Codacy analyzes their commits to private repositories, but they won't be able to join your Codacy organization. ## Permissions for GitLab -The table below maps the GitLab Cloud and GitLab Enterprise roles to the corresponding Codacy roles and the operations that they're allowed to perform: +The following GitLab Cloud and GitLab Enterprise roles map to these Codacy roles: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
GitLab roleExternal
user1		Project
guest		Project
reporter		Project
developer		Project
maintainer		Project
owner		-Group
owner		Administrator
Codacy role-Repository
read		Repository
write		Repository
admin		Organization
manager		Organization
admin
Join organizationNoYes2Yes2Yes2YesYes2
View and follow private repositoryNoYesYesYesYesYes
Access Security and risk managementNoYes3Yes3Yes3YesYes
Access AI Risk Hub OverviewNoYesYesYesYesYes
Access AI Risk Hub AI assets and Tools & workflowsNoNoNoNoYesYes
Ignore issues and files,
configure code patterns,
reanalyze branches and pull requests		NoConfigurableConfigurableYesInherits original permissionYes
Upload coverage using an account API token,
see the coverage report logs		NoNoYesYesInherits original permissionYes
Configure repository Git provider integration settingsNoNoNoYesInherits original permissionYes
Configure repository quality gates and goalsNoNoNoYesInherits original permissionYes
Configure repository to run analysis on local build server, manage repository API tokensNoNoNoYesInherits original permissionYes
Add and remove repositoryNoNoNoYesInherits original permissionYes
Manage organization gate policies and coding standardsNoNoNoNoYesYes
Configure organization default settings for Git provider integrationNoNoNoNoYesYes
Obtain audit logs for organization events4NoNoNoNoYesYes
Invite and accept members,
modify billing		NoNoNoNoNoYes
Assign and revoke the organization manager roleNoNoNoNoNoYes
+| GitLab role | Codacy role | +|---|---| +| External user1 | Not supported as a Codacy role | +| Project guest, Project reporter | [Repository read](#repository-read) | +| Project developer | [Repository write](#repository-write) | +| Project maintainer, Project owner | [Repository admin](#repository-admin) | +| — (assigned directly on Codacy) | [Organization manager](#organization-manager) | +| Group owner, Administrator | [Organization admin](#organization-admin) | -1: External users aren't supported as members of organizations on Codacy. You can still [add external users to Codacy](managing-people.md#adding-people) so that Codacy analyzes their commits to private repositories, but they won't be able to join your Codacy organization. -2: Joining an organization may need an approval depending on your setting for [accepting new people](changing-your-plan-and-billing.md#allowing-new-people-to-join-your-organization). -3: These users can only see security items originating from Codacy repositories that they follow. -4: [Audit logs](./audit-logs-for-organizations.md) are available only on [Business plan](https://www.codacy.com/pricing). +1: External users aren't supported as members of organizations on Codacy. You can still [add external users to Codacy](managing-people.md#adding-people) so that Codacy analyzes their commits to private repositories, but they won't be able to join your Codacy organization. ## Permissions for Bitbucket -The table below maps the Bitbucket Cloud and Bitbucket Server roles to the corresponding Codacy roles and the operations that they're allowed to perform: +The following Bitbucket Cloud and Bitbucket Server roles map to these Codacy roles: + +| Bitbucket role | Codacy role | +|---|---| +| Read, Write1 | [Repository read](#repository-read) | +| — (assigned directly on Codacy) | [Organization manager](#organization-manager) | +| Admin | [Organization admin](#organization-admin) | + +Bitbucket has no role that maps to [Repository write](#repository-write) or [Repository admin](#repository-admin). + +1: Codacy can't distinguish the Bitbucket roles Read and Write because of a limitation on the Bitbucket API. + +## Permissions by Codacy role + +The table below compares what each Codacy role is allowed to do. These permissions are the same regardless of Git provider—see [Permissions for GitHub](#permissions-for-github), [Permissions for GitLab](#permissions-for-gitlab), or [Permissions for Bitbucket](#permissions-for-bitbucket) to find your Codacy role. - - - - - + + + + + + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + +
Bitbucket roleReadWrite1-AdminOperationRepository readRepository writeRepository adminOrganization managerOrganization admin
Codacy roleRepository
read		Organization
manager		Organization
admin
Join organizationYes2YesYes2
View and follow private repositoryYesYesYes
Access Security and risk managementYes3YesYes
Access AI Risk Hub OverviewYesYesYes
Access AI Risk Hub AI assets and Tools & workflowsNoYesYes
Ignore issues and files,
configure code patterns,
reanalyze branches and pull requests		ConfigurableInherits original permissionYes
Upload coverage using an account API token,
see the coverage report logs		NoInherits original permissionYes
Configure repository Git provider integration settingsNoInherits original permissionYes
Configure repository quality gates and goalsNoInherits original permissionYes
Configure repository to run analysis on local build server, manage repository API tokensNoInherits original permissionYes
Add and remove repositoryNoInherits original permissionYes
Manage organization gate policies and coding standardsNoYesYes
Configure organization default settings for Git provider integrationNoYesYes
Obtain audit logs for organization events4NoYesYes
Invite and accept members,
modify billing		NoNoYes
Assign and revoke the organization manager roleNoNoYes
Join organizationYes1Yes1Yes1YesYes1
View and follow private repositoryYesYesYesYesYes
Access Security and risk managementYes2Yes2Yes2YesYes
Access AI Risk Hub OverviewYesYesYesYesYes
Access AI Risk Hub AI assets and Tools & workflowsNoNoNoYesYes
Ignore issues and files, configure code patterns, reanalyze branches and pull requestsConfigurableConfigurableYesInherits original permissionYes
Upload coverage using an account API token, see the coverage report logsNoYesYesInherits original permissionYes
Configure repository Git provider integration settingsNoNoYesInherits original permissionYes
Configure repository quality gates and goalsNoNoYesInherits original permissionYes
Configure repository to run analysis on a local build server, manage repository API tokensNoNoYesInherits original permissionYes
Add and remove repositoryNoNoYes3Inherits original permissionYes
Manage organization gate policies and coding standardsNoNoNoYesYes
Configure organization default settings for Git provider integrationNoNoNoYesYes
Obtain audit logs for organization events4NoNoNoYesYes
Invite and accept members, modify billingNoNoNoNoYes
Assign and revoke the organization manager roleNoNoNoNoYes
-1: Codacy can't distinguish the Bitbucket roles Read and Write because of a limitation on the Bitbucket API. -2: Joining an organization may need an approval depending on your setting for [accepting new people](changing-your-plan-and-billing.md#allowing-new-people-to-join-your-organization). -3: These users can only see security items originating from Codacy repositories that they follow. +1: Joining an organization may need an approval depending on your setting for [accepting new people](changing-your-plan-and-billing.md#allowing-new-people-to-join-your-organization). +2: These users can only see security items originating from Codacy repositories that they follow. +3: On GitHub, requires that an organization owner has given the Codacy GitHub App access to the repositories to add or remove. 4: [Audit logs](./audit-logs-for-organizations.md) are available only on [Business plan](https://www.codacy.com/pricing). ## See also @@ -569,17 +168,12 @@ td:not(:first-child), th:not(:first-child) { text-align: center !important; } -/*Background color for row containing the Codacy permission levels*/ -table:not(data-exclude) tr:nth-child(1) td { - background-color: var(--docs-bg-brand); -} - -/*Add vertical borders and disable horizontal borders*/ -td { +/*Add vertical and horizontal borders between cells*/ +th, td { border-left: 1px solid var(--md-default-fg-color--lightest); border-top: 1px solid var(--md-default-fg-color--lightest); } -td:nth-child(1) { +th:nth-child(1), td:nth-child(1) { border-left: 0; }