Roles and permissions

A number of roles are defined in the product that can be assigned to a user or group. Roles set boundaries on activities that a user or group member can perform.

Roles are assigned to users and groups within the team context. Users or groups are assigned to a team with a specific role. The role assigned to a user is only for the team that the user is a member. A user can be a member of multiple teams and have a different role on each.

The interlocking concept of teams, roles, and permissions ensures that users have the appropriate permissions to perform their work and not affect processes outside of their assigned scope. The interaction of these three concepts provides the mechanisms to create an infrastructure that is secure and flexible.

There are two types of roles, global and team. Global roles provide permissions to access all resources of the product. Team specific roles provide permissions to access team specific resources of the product. Users with team specific roles can view only the resources associated with that team.

You can customize the roles using the following procedure.
  1. On the HCL DevOps Velocity (Velocity) dashboard, click Settings Settings icon, and then click Authorization > Roles.
  2. On the Roles page, click Create role.
  3. In the Name field, enter the name for the role.
  4. In the Description field, enter the description for the role.
  5. In the Scope field, select the scope for the role.
    Note: The possible values for the scope of the roles are global and team.
  6. In the Permissions field, select the required action under each resources.
  7. Click Save.
Note: The users with Team manager (global) and Product administrator role can create roles.
You can assign members to global roles using the following procedure.
  1. Click Assign members to assign members to roles.
  2. In the Members field, enter or select the member to assign the roles.
  3. Click Save.

You can use Edit roles to edit roles and Delete roles to delete roles.

The roles with label Custom are customized roles. The roles with label static are system generated roles. Static roles cannot be modified or deleted.

Note: Until new users are assigned to teams, they are automatically assigned to the Default team with no assigned role. Administrators grant users elevated permissions when they assign them to roles such as Lead Developer or Release Manager.
The following tables show the available roles.
Note: For each of the roles, the underlying resources and permissions are also scoped as team or global.
Table 1. Calendar manager
Resource Action Description
Calendar View, Create, Edit, Delete View, create, edit, and delete calendar settings.
Table 2. Developer (team)
Resource Action Description
Deployment plan View View deployment plans.
Environment Run Run team specific deployment in pipelines.
Group View View groups.
Integration View View plugin integrations.
Release View View team specific releases.
Task Create, Edit, Delete, Run Create, edit, run, and delete team specific tasks.
Team View View teams.
Value stream View View team specific value streams and pipelines.
Table 3. Insights manager (global)
Resource Action Description
Dashboard View, Create, Edit, Delete View, create, edit, and delete dashboards.
Integration View View plugin integrations.
Report View, Create, Run View, create, and run reports.
Value stream View View value streams and pipelines.
Table 4. Insights viewer
Resource Action Description
Dashboard View View dashboards
Report View View reports.
Value stream View View value streams and pipelines.
Table 5. Lead developer (team)
Resource Action Description
Application Create, Edit, Delete Create, edit, and delete pipeline applications.
Deployment plan View, Create, Edit, Archive, Restore View, create, edit, archive, and restore deployment plans.
Deployment template View, Create, Edit, Archive View, create, edit, and archive deployment templates.
Environment Create, Edit, Delete, Override, Run Create, edit, delete, and override pipelines environments. Run deployment in pipeline environments.
Gate Edit, Delete, Approve, Override Edit, delete, approve, and override pipeline gates.
Group View View groups.
Integration View View plugin integrations.
Release View, Create, Edit, Archive, Restore View, create, edit, archive, and restore releases.
Report View, Create, Run View, create, and run reports.
Task Create, Edit, Delete, Run Create, edit, delete and run task.
Team View View teams.
Value stream View, Create View and create value streams. View pipelines.
Table 6. Lead release manager
Resource Action Description
Deployment plan View, Create, Edit, Archive, Restore View, create, edit, archive and restore deployment plans.
Deployment template View, Create, Edit View, create, and edit deployment plan templates.
Environment Run Run deployment in team specific pipeline environments.
Gate Approve, Override Approve and override team specific gates.
Group View View groups.
Integration View View plugin integrations.
Release View, Create, Edit, Lock, Unlock, Archive, Restore View, create, edit, lock, unlock, archive, and restore team specific releases.
Role View View roles.
Task Create, Edit, Delete, Run Create, edit, delete, and run team specific tasks.
Team View, Add member, Remove member View specific teams. Add and remove members to specific teams.
User View View users.
Value stream View View team specific value streams and pipelines.
Table 7. Pipeline designer (team)
Resource Action Description
Application Create, Edit, Delete Create, edit, and delete team specific pipeline applications.
Deployment plan View, Create, Edit View, create, and edit team specific deployment plans.
Deployment template View, Create, Edit View, create, and edit deployment templates.
Environment Create, Edit, Override, Delete, Run Create, edit, and delete team specific pipelines environments. Run deployment in team specific pipeline environments.
Gate Edit, Delete Edit and delete team specific pipeline gates.
Group View View groups.
Integration View View plugin integrations.
Release View, Create, Edit, Archive, Restore View, create, edit, archive, and restore team specific releases.
Task Create, Edit, Delete Create, edit, and delete team specific tasks.
Team View View teams.
Value stream View, Create View and create team specific value streams. View pipelines.
Table 8. Pipeline executor (team)
Resource Action Description
Environment Run Run deployment in team specific pipeline environments.
Value stream View View team specific value streams and pipelines.
Table 9. Product administrator
Resource Action Description
Account setting View, Edit View and edit account settings.
Application Create, Edit, Delete Create, edit, and delete pipeline applications.
Authentication configuration View, Create, Edit, Delete View, create, edit, and delete authentication configurations.
Calendar View, Create, Edit, Delete View, create, edit, and delete calendar settings.
Dashboard View, Create, Edit, Delete View, create, edit, and delete dashboards.
Deployment plan View, Create, Edit, Archive, Restore View, create, edit, archive, and restore deployment plans.
Deployment template View, Create, Edit View, create, and edit deployment templates.
Email server configuration View, Edit View and edit email server configurations.
Environment Create, Edit, Override, Delete, Run Create, edit, override, delete, and run pipeline environments.
External User Token View, Edit View and edit external tool user tokens.
Gate Edit, Delete, Approve, Override Edit, delete, approve, and override pipeline gates.
Group View, Create, Edit, Delete, Add member, Remove member, Add role, Remove role View, create, edit, and delete groups. Add and remove members to groups. Add and remove roles to groups.
Integration View, Create, Edit, Delete, Upgrade View, create, edit, delete, and upgrade plugin integrations.
Plugin View, Create, Edit, Delete, Install, Download View, create, edit, delete, install, and download plugins.
Release View, Create, Edit, Lock, Unlock, Archive, Restore View, create, edit, lock, unlock, archive, and restore releases.
Report View, Create, Run View, create, and run reports.
Role View, Create, Edit, Delete View, create, edit, and delete roles.
Task Create, Edit, Delete, Run Create, edit, delete, and run tasks.
Team View, Create, Edit, Delete, Add role, Remove role, Add member, Remove member View, create, edit, and delete teams. Add and remove members to teams. Add and remove roles to teams.
User View, Create, Edit, Delete, Add role, Remove role, Add access key, Remove access key View, create, edit, and delete users. Add and remove roles to teams. Add and remove access key to users.
Value stream View, Create, Edit, Delete, Design View, create, edit, delete, and design value streams.
Table 10. Release executor
Resource Action Description
Deployment plan View View team specific deployment plans.
Group View View groups.
Release View View team specific releases.
Task Run Run team specific tasks.
Table 11. Release manager (team)
Resource Action Description
Deployment plan View, Create, Edit, Archive, Restore View, create, edit, archive, and restore team specific deployment plans.
Deployment template View, Create, Edit View, create, and edit deployment plan templates.
Environment Run Run deployment in team specific pipelines.
Gate Approve, Override Approve and override team specific gates.
Group View View groups.
Integration View View plugin integrations.
Release View, Create, Edit, Lock, Unlock, Archive, Restore View, create, edit, lock, unlock, archive, and restore team specific releases.
Task Create, Edit, Delete, Run Create, edit, delete, and run team specific tasks.
Team View View teams.
Value stream View View team specific value streams and pipelines.
Table 12. Release participant (team)
Resource Action Description
Deployment plan View View team specific deployment plans.
Group View View groups.
Integration View View plugin integrations.
Release View View team specific releases.
Task Create, Edit, Delete, Run Create, edit, delete, and run team specific tasks.
Team View View teams.
Table 13. Team manager (team)
Resource Action Description
Group View View groups.
Role View View roles.
Team View, Edit, Delete, Add role, Remove role, Add member, Remove member View, edit, and delete teams. Add and remove members to teams. Add and remove roles to teams.
User View View users.
Table 14. Team manager (global)
Resource Action Description
Group View View all groups.
Role View View all roles.
Team View, Create, Edit, Delete, Add role, Remove role, Add member, Remove member View, create, edit, and delete teams. Add and remove members to teams. Add and remove roles to teams.
User View View all users.
Table 15. Value stream manager
Resource Action Description
Value stream View, Create, Edit, Design, Delete View, create, edit, design, and delete team specific value streams and pipelines.
Table 16. Value stream viewer
Resource Action Description
Value stream View View team specific value streams and pipelines.
Table 17. Viewer (global)
Resource Actions Description
Account setting View View account settings.
Authentication configuration View View authentication settings.
Calendar View View calendar settings.
Dashboard View View dashboards.
Deployment plan View View deployment plans.
Email server configuration View View email server configurations.
Group View View all groups.
Integration View View configured plugin integrations.
Plugin View View available plugins.
Release View View releases.
Report View View reports.
Role View View all user roles.
Team View View all teams.
User View View all users.
Value stream View View deployment plans and value streams. Create user access token.
Table 18. Viewer (team)
Resource Action Description
Deployment plan View View deployment plans.
Group View View team specific groups.
Release View View team specific releases.
Role View View team specific user roles.
Team View View specific teams.
User View View team specific users.
Value stream View View team specific value streams and pipelines.