Last updated Nov 11, 2024

Understand permission policies in Compass

Compass Premium includes permission policies to help you maintain the integrity of your component catalog at scale by restricting access to critical actions to only those who need it.

There are two different permission policies you can use to enforce who can take certain actions for things in Compass: Open and Restricted.

The open permission policy lets basic and full users take most actions in Compass without needing to be a product admin.

The restricted permission policy restricts most actions to product admins, component owners, and scorecard owners. Basic users and full users have mostly read-only access, and product admins can take all actions. The exceptions to this are for actions that component and scorecard owners can take on the things they own, and unowned components being open for all users to take actions on.

Open

FeatureBasic userFull userProduct admin
Components
Search and view componentsYesYesYes
Create and import componentsYesYesYes
Edit componentsYesYesYes
Delete components (including unowned components)YesYesYes
Create and edit dependenciesYesYesYes
Set up config-as-code for componentsYesYesYes
Create a Jira issue for a scorecard on a componentNoYesYes
Creating and acknowledging announcementsNoYesYes
Templates (create and use)YesYesYes
Templates (search and view components of the template type)YesYesYes
Star, watch componentsNoYesYes
Metrics
Create metricsNoYesYes
Apply metrics to componentsNoYesYes
View metricsYesYesYes
Scorecards
View scorecards (built-in and custom)Built-in onlyYesYes
Create scorecardsNoYesYes
Edit scorecardsNoYesYes
Apply scorecardsNoYesYes
Manage unowned scorecardsNoYesYes
Teams and health
Teams (search, create, edit, view)YesYesYes
CheckOpsNoYesYes
HealthNoYesYes
Custom fields
Create custom fieldsNoYesYes
Edit custom fieldsNoYesYes
Add or edit values on components YesYesYes
Apps and settings
Apps (view, install, configure, uninstall)NoView apps list onlyYes
App UI extensionsNoYes (some extensions)Yes (all extensions)
Notifications bell, helpYesYesYes
SettingsNoNoYes
Change permissionsNoNoYes
Compass emails (ownership, CheckOps, Announcements, Weekly email, etc.)Ownership emails onlyYesYes

Restricted

FeatureBasic userFull userProduct admin
Components
Search and view componentsYesYesYes
Create and import componentsYesYesYes
Edit componentsOnly components they own and unowned componentsYes
Delete componentsOnly components they own and unowned componentsYes
Create and edit dependenciesNoNoYes
Set up config-as-code for componentsNoNoYes
Create a Jira issue for a scorecard on a componentNoOnly for:
- Unowned components
- Scorecards they own - Components they own
Yes
Creating and acknowledging announcementsNoOnly for components they own and unowned componentsYes
Templates (create and use)YesYesYes
Templates (search and view components of the template type)YesYesYes
Star, watch componentsNoYesYes
Metrics
Create metricsNoNoYes
Apply metrics to componentsNoOnly owners of the component the metric is being applied toYes
View metricsNoYesYes
Scorecards
View scorecards (built-in and custom)Built-in onlyYesYes
Create scorecardsNoNoYes
Edit scorecardsNoOnly scorecards they ownYes
Apply scorecardsNoOnly to components they own and unowned componentsYes
Manage unowned scorecardsNoNoYes
Teams and health
Teams (search, create, edit, view)YesYesYes
CheckOpsNoYesYes
HealthNoYesYes
Custom fields
Create custom fieldsNoYesYes
Edit custom fieldsNoYesYes
Add or edit values on components YesYesYes
Apps and settings
Apps (view, install, configure, uninstall)NoView apps list onlyYes
App UI extensionsNoYes (some extensions)Yes (all extensions)
Notifications bell, helpYesYesYes
SettingsNoNoYes
Change permissionsNoNoYes
Compass emails (ownership, CheckOps, Announcements, Weekly email, etc.)Ownership emails onlyYesYes

Rate this page: