System Roles and Permissions

The following table lists the roles and associated permissions used to manage Code Insight at the system level. The initial Code Insight System Administrator (and any subsequent System Administrators) manages user accounts and assigns system-level roles to any of these users as needed. For more information, see Managing Users in the “Configuring Code Insight” chapter.

One user can be assigned multiple roles.

Responsibility: Administer Code Insight

Permissions	Notes	Role: System Admin	Role: Policy Manager	Role: Project Creator	Role: Library Manager
Manage user accounts and permissions, create other system administrators, create policy managers, and allow all/or specified users to create projects			X	X	X
Schedule or force Electronic Updates/Library Refreshes			X	X	X
Configure an email server workflow notifications			X	X	X
Configure LDAP users			X	X	X
Configure Application Lifecycle (ALM) instances to manage inventory review tasks			X	X	X
Configure Scan Servers and scan profiles			X	X	X
Define global project defaults			X	X	X
Determine the CVSS version used for security vulnerability reporting			X	X	X
Create and manage custom fields for inventory and projects			X	X	X
View Code Insight logs			X	X	X
Suppress security vulnerabilities			X	X	X

Responsibility: Manage polices for automating inventory review processes

Permissions	Notes	Role: System Admin	Role: Policy Manager	Role: Project Creator	Role: Library Manager
Manage policies		X		X	X
Force automatic review of inventory across all projects		X		X	X

Responsibility: Create projects

Permissions	Notes	Role: System Admin	Role: Policy Manager	Role: Project Creator	Role: Library Manager
Create public and private projects	The user who creates a project automatically becomes the Project Contact for that project. (See Project Roles and Permissions for additional Project Contacts permissions.)	X	X		X
Manage project folders (in Projects pane)		X	X		X

Responsibility: Manage custom components and custom licenses

Permissions	Notes	Role: System Admin	Role: Policy Manager	Role: Project Creator	Role: Library Manager
Manage custom components and custom licenses by creating, editing, and deleting them as required.		X	X	X

Responsibility: Manage custom detection rules

Permissions	Notes	Role: System Admin	Role: Policy Manager	Role: Project Creator	Role: Library Manager
Manage custom detection rules by creating, editing and deleting them as required.		X	X	X