Skip to content

Module Settings Permission Matrix

Field-level permissions for the module settings tabs. For the codes, role abbreviations and contexts, see the project settings matrix.

📸 Screenshot: the module settings tabs.

Roles are combined with OR. See Permission Model.

Module settings: base rights

Each heading is a tab in the module settings. The columns are Dev, CM, PM, Mgr, AA, EA, CCM and CSM.

General

Setting Dev CM PM Mgr AA EA CCM CSM
name rw r r r r r r r
version rw r r r r r r r
description rw r r r r r r r
projectId rw r r r r r r r
tags rw r rw r r r r r
leanix r r r r r r r r
moduleIdentifier r r r r r r r r
architectureType r r r r r r r r
relatedUsers › defaultProjectManager r r rw r r r r r
relatedUsers › defaultComplianceManager r r rw r r r r r
relatedUsers › members r r r r r r r r
properties › privacy r r r r r r r r
Setting Dev CM PM Mgr AA EA CCM CSM
settings r r r r - - - -
project r r r r - - - -
wizard - - - - - - - -
import_template - - - - - - - -
import_project - - - - - - - -
propagate - - - - - - - -

Resolved obligations

Setting Dev CM PM Mgr AA EA CCM CSM
list r r r r - - - -
project r r r r - - - -
import - - - - - - - -
propagate - - - - - - - -

Viability

Setting Dev CM PM Mgr AA EA CCM CSM
viabilityConfig › enabled rw r r r r r r r
import rx - - - - - - -
warningThreshold rw r r r r r r r
violationThreshold rw r r r r r r r
minConfidence rw r r r r r r r
noInfoLevel rw r r r r r r r

OSSF

Setting Dev CM PM Mgr AA EA CCM CSM
ossfConfig › enabled rw r r r r r r r
warningThreshold rw r r r r r r r
violationThreshold rw r r r r r r r
noInfoLevel rw r r r r r r r

Versioning

Setting Dev CM PM Mgr AA EA CCM CSM
versioningConfig › enabled rw r r r r r r r
jump rw r r r r r r r
import rx - - - - - - -
warningThreshold rw r r r r r r r
violationThreshold rw r r r r r r r

MDR/IVDR Classification

Setting Dev CM PM Mgr AA EA CCM CSM
settings rw - r - r r r r
import rx - - - - - - -
propagate rx - - - - - - -
MDR rw r r r r r r r
IVDR rw r r r r r r r

CIA

Setting Dev CM PM Mgr AA EA CCM CSM
settings rw r r r r r r rw
import rx - - - - - - rx

Capabilities

Setting Dev CM PM Mgr AA EA CCM CSM
settings rw rw rw rw r r r rw
import rx rx rx rx - - - rx

Crypto management

Setting Dev CM PM Mgr AA EA CCM CSM
settings rw r r r r r r r
import rx - - - - - - -

End-of-life

Setting Dev CM PM Mgr AA EA CCM CSM
settings rw r r r r r r r
import rx - - - - - - -

Quality

Setting Dev CM PM Mgr AA EA CCM CSM
settings rw r r r r r r r
import rx - - - - - - -

History

Setting Dev CM PM Mgr AA EA CCM CSM
analysis r r r r - - - -
scans r r r r - - - -

Allow/Deny

Setting Dev CM PM Mgr AA EA CCM CSM
whitelist_license_approve - - - - - - - -
whitelist_license rw r r r - - - -
whitelist_component_approve - - - - - - - -
whitelist_component rw r r r - - - -
blacklist_license rw r r r - - - -
blacklist_component rw r r r - - - -

Allowed vulnerability

Setting Dev CM PM Mgr AA EA CCM CSM
list rw r r r r r r r

Custom components

Setting Dev CM PM Mgr AA EA CCM CSM
settings rw r r r r r r r

Export SPDX

Setting Dev CM PM Mgr AA EA CCM CSM
export rx rx rx rx - - - -

Danger Operations

Setting Dev CM PM Mgr AA EA CCM CSM
delete rx - - - - - - -
delete_history rx - - - - - - -

Rights that depend on your relationship to the module

The tables above show the base rights. Three roles get different rights depending on how they relate to the module:

Context When it applies
Default owner A Manager or Compliance manager is the default project manager or default compliance manager of the module, or the module has none assigned.
Member A Developer is listed in the members of the module.
Non-member A Developer is not a member while the module has members.

The next tables list only settings where at least one of these contexts differs from the base. All other roles always have their base rights.

Context rights: General

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
name rw rw r r r r rw
version rw rw r r r r rw
description rw rw r r r r rw
projectId rw rw r r rw r rw
tags rw rw r r rw r rwd
leanix r rw r r r r rw
architectureType r r r r rw r rw
relatedUsers › defaultProjectManager r r r r rw r rw
relatedUsers › defaultComplianceManager r r r r rw r rw
relatedUsers › members r r r r rw r rw
properties › privacy r r r r rw r rw
Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
settings r r r r rw r rw
project r r r r rw r rw
wizard - - - - rx - rx
import_template - - - - rx - rx
import_project - - - - rx - rx
propagate - - - - rx - rx

Context rights: Resolved obligations

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
list r r r r rw r rw
project r r r r - r rw
import - - - - rx - rx
propagate - - - - rx - rx

Context rights: Viability

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
viabilityConfig › enabled rw rw r r rw r rw
import rx rx r - rx - rx
warningThreshold rw rw r r rw r rw
violationThreshold rw rw r r rw r rw
minConfidence rw rw r r rw r rw
noInfoLevel rw rw r r rw r rw

Context rights: OSSF

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
ossfConfig › enabled rw rw r r rw r rw
warningThreshold rw rw r r rw r rw
violationThreshold rw rw r r rw r rw
noInfoLevel rw rw r r rw r rw

Context rights: Versioning

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
versioningConfig › enabled rw rw r r rw r rw
jump rw rw r r rw r rw
import rx rx r - rx - rx
warningThreshold rw rw r r rw r rw
violationThreshold rw rw r r rw r rw

Context rights: MDR/IVDR Classification

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
settings rw rw r - rw - rw
import rx rx r - rx - rx
propagate rx rx r - rx - rx
MDR rw rw r r rw r rw
IVDR rw rw r r rw r rw

Context rights: CIA

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
settings rw rw r r rw r rw
import rx rx r - rx - rx

Context rights: Capabilities

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
settings rw rw r rw rw rw rw
import rx rx r rx rx rx rx

Context rights: Crypto management

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
settings rw rw r r rw r rw
import rx rx r - rx - rx

Context rights: End-of-life

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
settings rw rw r r rw r rw
import rx rx r - rx - rx

Context rights: Quality

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
settings rw rw r r rw r rw
import rx rx r - rx - rx

Context rights: History

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
analysis r r r r rwd r rwd

Context rights: Allow/Deny

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
whitelist_license_approve - - - - rx - -
whitelist_license rw rw r r rwd r rwd
whitelist_component_approve - - - - rx - -
whitelist_component rw rw r r rwd r rwd
blacklist_license rw rw r r rwd r rwd
blacklist_component rw rw r r rwd r rwd

Context rights: Allowed vulnerability

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
list rw rw r r rwd r rwd

Context rights: Custom components

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
settings rw rw r r rwd r rwd

Context rights: Export SPDX

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
export rx rx r rx rx rx rx

Context rights: Danger Operations

Setting Dev base Dev member Dev non-member CM base CM default owner Mgr base Mgr default owner
delete rx rx - - - - rx
delete_history rx rx - - - - rx