Learn Harness' Key Concepts

Quickstarts

Supported Platforms and Technologies

How to Use Harness Docs

Harness FirstGen vs Harness NextGen

Harness On-Premise Overview

CI Pipeline Quickstart

Build and Push an Artifact

Build and Push to GCR

Upload Artifacts to JFrog

Set Up a Kubernetes Cluster Build Infrastructure

Define Kubernetes Cluster Build Infrastructure

Edit a CI Pipeline Codebase Configuration

Save Cache to S3

Restore Cache from S3

Save Cache to GCS

Restore Cache from GCS

Run a Script in a CI Stage

View Tests

Set up Test Intelligence

CI Stage Settings

Configure Service Dependency Step Settings

Run Step Settings

Plugin Step Settings

Build and Push to GCR Step Settings

Build and Push an Image to Docker Registry Step Settings

Build and Push to ECR Step Settings

Upload Artifacts to S3 Step Settings

Upload Artifacts to GCS Step Settings

Upload Artifacts to JFrog Artifactory Step Settings

Save Cache to GCS Step Settings

Save Cache to S3 Step Settings

Restore Cache from GCS Settings

Restore Cache from S3 Step Settings

Run Tests Step Settings

CI Cluster Requirement

CI Enterprise Concepts

Drone and Harness

Test Intelligence

Troubleshooting Continuous Integration (CI)

Continuous Integration (CI) FAQs

Kubernetes CD Quickstart

Helm CD Quickstart

Harness Argo CD GitOps Quickstart

Kustomize Quickstart

Add Kubernetes Manifests

Add Container Images as Artifacts for Kubernetes Deployments

Add and Override Values YAML Files

Pull an Image from a Private Registry for Kubernetes

Ignore a Manifest File During Deployment

Define Your Kubernetes Target Infrastructure

Create a Kubernetes Rolling Deployment

Create a Kubernetes Canary Deployment

Create a Kubernetes Blue Green Deployment

Deploy Manifests Separately using Apply Step

Scale Kubernetes Pods

Delete Kubernetes Resources

Add a Kubernetes Sidecar Container

Run Kubernetes Jobs

Deploy Helm Charts

Terraform How-tos

Provision Target Deployment Infra Dynamically with Terraform

Plan Terraform Provisioning with the Terraform Plan Step

Provision with the Terraform Apply Step

Remove Provisioned Infra with the Terraform Destroy Step

Rollback Provisioned Infra with the Terraform Rollback Step

Propagate and Override CD Services

Using Shell Scripts in CD Stages

Using Manual Harness Approval Steps in CD Stages

Create Jira Issues in CD Stages

Update Jira Issues in CD Stages

Using HTTP Requests in CD Pipelines

Add a Pipeline Notification Strategy

Synchronize Deployments using Barriers

Monitor Deployments and Services in CD Dashboards

Verify Deployments with the Verify Step

Verify Deployments with AppDynamics

Verify Deployment with Prometheus

Verify Deployments with Splunk

Verify Deployments with Google Cloud Operations

Verify Deployments with New Relic

Example Kubernetes Manifests using Go Templating

Kubernetes Releases and Versioning

Kubernetes Rollout Step

Canary Deployment Step

Canary Delete Step

What Can I Deploy in Kubernetes?

Kubernetes Rollback

Kubernetes Annotations and Labels

Kubernetes Apply Step

JSON and XML Functors

HTTP Step Reference

Run Steps in a Step Group

Shell Script Step Reference

Deployment Concepts and Strategies

Kubernetes Deployments Overview

Terraform Provisioning with Harness

Harness NextGen CD Video Summary

Getting Started with Feature Flags

Java Quickstart

Create a Feature Flag

Enable or Disable a Feature Flag

Edit and Delete a Feature Flag

Add Targets

Manage Target Groups

Manage Variations of the Feature Flag

Add Flag Prerequisites

Targeting Users with Flags

Add and Manage Access Control

View Activities of a Feature Flag

View Metrics

JavaScript SDK Reference

iOS SDK Reference

Android SDK Reference

Flutter SDK Reference

React Native SDK Reference

Java SDK Reference

Go SDK Reference

Node.js SDK Reference

.NET SDK Reference

Python SDK Reference

Communication Strategy Between SDKs and Harness Feature Flags

GDPR Compliance

Feature Flags Overview

Client-Side and Server-Side SDKs

SDK Version Policy

Harness Feature Flag FAQs

Set Up Cloud Cost Management for AWS

Set Up Cloud Cost Management for Azure

Set Up Cloud Cost Management for GCP

Set Up Cloud Cost Management for Kubernetes

Create an AWS Connector for AutoStopping Rules

Create an Azure Connector for AutoStopping Rules

Create a GCP Connector for AutoStopping Rules

Create a Kubernetes Connector for AutoStopping Rules

Create AutoStopping Rules for AWS

Create AutoStopping Rules for Azure

Create AutoStopping Rules for GCP

Create AutoStopping Rules for a Kubernetes Cluster

Create AutoStopping Rules for Terraform

Use AutoStopping Rules Dashboard

Create an Application Load Balancer for AWS

Create an Application Gateway for Azure

Analyze Cost for AWS Using Perspectives

Analyze Cost for Azure Using Perspectives

Analyze Cost for GCP Using Perspectives

Create Cost Perspectives

Optimize Kubernetes Costs with Workload Recommendations

Optimize Kubernetes Costs with Node Pool Recommendations

View AWS Cost Dashboard

View AWS Reservation Efficiency Dashboard

View Azure Cost Dashboard

View Cluster Cost Dashboard

View GCP Cost Dashboard

View Multi-cloud Cost Overview Dashboard

Orphaned EBS Volumes and Snapshots Dashboard

View AWS EC2 Instance Metrics Dashboard

View AWS EC2 Inventory Cost Dashboard

Manage Access Control for CCM Dashboards

Cloud Cost Management Overview

AutoStopping Rules Overview

Key Cloud Cost Concepts

Cloud Cost Management FAQs

AutoStopping Rules FAQs

Harness YAML Quickstart

Harness Git Experience Quickstart

API Quickstart

Create Organizations and Projects

Install a Kubernetes Delegate

Select Delegates with Tags

Run Scripts on Delegates using Delegate Configurations

Scope Harness Delegates to Environments

Configure Delegate Proxy Settings

Connect to a Cloud Provider

Add a Kubernetes Cluster Connector

Add an AWS Connector

Add a Google Cloud Platform (GCP) Connector

Connect to an Artifact Repo

Connect to a Git Repo

Use a GitHub App in a GitHub Connector

Connect to Jira

Connect to Monitoring and Logging Systems

Create a Connector using YAML

Add Text Secrets

Add File Secrets

Add a HashiCorp Vault Secrets Manager

Add an Azure Key Vault Secrets Manager

Add an AWS Secret Manager

Add a Secrets Manager

Add an AWS KMS Secrets Manager

Add SSH Keys

Add and Manage User Groups

Add and Manage Users

Add and Manage Roles

Add and Manage Resource Groups

Set Up RBAC for Pipelines

Set Up RBAC for Shared Secrets and Connectors

Add and Manage Service Account

Two-Factor Authentication

Single Sign-On (SSO) with SAML

Single Sign-On (SSO) with OAuth

Add and Manage API Keys

Add a Stage

Define a Failure Strategy on Stages and Steps

Run Pipelines using Input Sets and Overlays

Searching the Console View

Adding Jira Approval Stages and Steps

Using Manual Harness Approval Stages

Schedule Pipelines using Triggers

Trigger Pipelines using Git Events

Git Experience How-tos

Add Source Code Managers

Enable Git Experience in a Project

Manage Pipelines in Git Repos

Manage Project Resources in Git Repos

Manage Input Sets and Overlays in Git Repos

Add Folders to Existing Git Experience Repos

Create Dashboards

Schedule and Share Dashboards

Create Visualizations and Graphs

Download Dashboard Data

Use Dashboard Actions

Create Conditional Alerts

Send Notifications Using Slack

Send Notifications to Microsoft Teams

Harness Entity Reference

Entity Identifier Reference

Entity Retention Policy

Entity Deletion Reference

Tags Reference

Delegate Requirements and Limitations

Permissions and Ports for Harness Connections

Common Delegate Configuration Scripts

Step and Stage Failure Strategy References

Stage and Step Conditional Execution Settings

Triggers Reference

YAML Reference: Pipelines

Built-in Harness Variables Reference

GitLab Connector Settings Reference

Bitbucket Connector Settings Reference

AWS CodeCommit Connector Settings Reference

Git Connector Settings Reference

GitHub Connector Settings Reference

AWS Connector Settings Reference

Kubernetes Cluster Connector Settings Reference

Google Cloud Platform (GCP) Connector Settings Reference

HTTP Helm Repo Connector Settings Reference

Artifactory Connector Settings Reference

Nexus Connector Settings Reference

Docker Connector Settings Reference

Jira Connector Settings Reference

API Permissions Reference

Permissions Reference

Source Code Manager Settings

Projects and Organizations

Delegates Overview

Delegate Installation Overview

Harness Secrets Management Overview

Access Management (RBAC) Overview

Fixed Values, Runtime Inputs, and Expressions

Input Sets and Overlays

Authentication Overview

Harness Git Experience Overview

Harness NextGen Continuous Verification Coming Soon

Kubernetes Cluster On-Prem: Infrastructure Requirements

Kubernetes Cluster On-Prem: Kubernetes Cluster Setup

Harness On-Prem Support Policy for Kubernetes

Kubernetes Cluster On-Prem: Add Ingress Controller Service Annotations

Virtual Machine On-Prem: Infrastructure Requirements

Virtual Machine On-Prem: Installation Guide

Virtual Machine On-Prem: Backup and Recovery

Harness On-Prem Release Notes 2021

All Categories > Harness Platform > Platform Technical Reference > Access Management Reference > Permissions Reference

Permissions Reference

Updated 3 months ago by Rashmi Nanda Sahoo

Module Permissions
Default Resource Group
Default Roles

This topic gives you details of the Harness Module Permissions and Default Roles and Resource Groups available in the Harness system.

In this topic:

Module Permissions

Platform

The following table lists permissions for Platform. To know more about Platforms, see Harness Platform.

Scope	Resource Type	Action
Account	Authentication Settings	View Create/Edit Delete
Account	Organizations	View Create
Account/Org/Project	Connectors	View Create/Edit Delete Access
Account/Org/Project	Secrets	View Create/Edit Delete Access
Account/Org/Project	Delegates	View Create/Edit Delete Approve Reject
Account/Org/Project	Delegate Configurations	View Create/Edit Delete
Account/Org/Project	Users	View Manage Invite
Account/Org/Project	User Groups	View Manage
Account/Org/Project	Roles	View Create/Edit Delete
Account/Org/Project	Resource Groups	View Create/Edit Delete
Account/Org/Project	Environments	View Create/Edit Delete Access
Account/Org/Project	Services	View Create/Edit Delete Access

Continuous Delivery (CD)

The following table lists permissions for Harness Continuous Delivery module. To know more, see Continuous Delivery.

Scope	Resource Type	Action
Project	Pipeline	View Create/Edit Delete Execute
Project	Environments	View Create/Edit Delete Access
Project	Services	View Create/Edit Delete Access
Project	Delegate Configurations	View Create/Edit Delete
Project	Secrets	View Create/Edit Delete Access
Project	Delegates	View Create/Edit Delete
Project	Connectors	View Create/Edit Delete Access
Project	Feature Flags	Toggle Edit Delete
Project	Target Management	Edit Delete

Continuous Integration (CI)

The following table lists permissions for Harness Continuous Integration module. To know more, see Continuous Integration.

Scope	Resource Type	Action
Project	Pipeline	View Create/Edit Delete Execute
Project	Feature Flags	Toggle Edit Delete
Project	Target Management	Edit Delete

Feature Flags (FF)

The following table lists permissions for Harness Feature Flags. To know more, see Feature Flags.

Scope	Resource Type	Action
Project	Features Flags	Toggle Edit Delete
Project	Target Management	Edit Delete
Project	Environments	View Create/Edit Delete Access

Default Resource Group

Harness includes a default Resource Group: All Resources at Account, Org, and Project level. It includes all the resources.

Default Roles

Each Harness account includes default Roles to help you organize your users. The following table describes the default Harness Roles.

Scope	Default Roles	Permissions
Account	Account Administrator	View/Create Organizations View/Manage User Groups View/Create/Edit/Delete Roles View/Create/Edit/Delete Resource Groups View/Manage/Invite Users View/Create/Edit/Delete Authentication Settings Toggle/Edit/Delete Feature Flags Edit/Delete Target Management View/Create/Edit/Delete/Access Environments View/Create/Edit/Delete/Access Services View/Create/Edit/Delete Delegate Configurations View/Create/Edit/Delete/Access Secrets View/Create/Edit/Delete Delegates View/Create/Edit/Delete/Access Connectors
Account	Account Viewer	View Organizations View User Groups View Roles View Resource Groups View Users View Authentication Settings View Environments View Services View Delegate Configurations View Secrets View Delegates View Connectors
Organization	Organization Admin	View/Create/Edit/Delete Organizations View/Manage User Groups View/Create/Edit/Delete Roles View/Create/Edit/Delete Resource Groups View/Create Projects View/Manage/Invite Users Toggle/Edit/Delete Feature Flags Edit/Delete Target Management View/Create/Edit/Delete/Access Environments View/Create/Edit/Delete/Access Services View/Create/Edit/Delete Delegate Configurations View/Create/Edit/Delete/Access Secrets View/Create/Edit/Delete Delegates View/Create/Edit/Delete/Access Connectors
Organization	Organization Viewer	View Organizations View User Groups View Roles View Resource Groups View/Create Projects View Users View Environments View Services View Delegate Configurations View Secrets View DelegatesDelegates View Connectors
Project	Project Admin	View/Manage User Groups View/Create/Edit/Delete Roles View/Create/Edit/Delete Resource Groups View/Create/Edit/Delete Projects View/Manage/Invite Users View/Manage User Groups View/Create/Edit/Delete/Access Environments View/Create/Edit/Delete/Access Services View/Create/Edit/Delete/Execute Pipelines View/Create/Edit/Delete Delegate Configurations View/Create/Edit/Delete/Access Secrets View/Create/Edit/Delete Delegates View/Create/Edit/Delete/Access Connectors
Project	Pipeline Executor	View User Groups View Roles View Resource Groups View Projects View Users View/Access Environments View/Access Services View/Execute Pipelines View/Access Secrets View/Access Connectors
Project	Project Viewer	View User Groups View Roles View Resource Groups View Projects View Users View User Groups View Environments View Services View Pipelines View Delegate Configurations View Secrets View Delegates View Connectors

Permissions Reference

Module Permissions

Platform

Continuous Delivery (CD)

Continuous Integration (CI)

Feature Flags (FF)

Default Resource Group

Default Roles

Please Provide Feedback

People also searched for Add and Manage Users Add and Manage Roles Add and Manage Resource Groups

Contact

People also searched for

Add and Manage Users

Add and Manage Roles

Add and Manage Resource Groups