Owner

Last updated Oct 17, 2026 Settings

AI summary

The Owner role provides broad permissions across all Rencore Governance product areas, from access reviews and automations to workspace settings. Your role determines what you can do, and your Rencore team determines which objects you can see. Some permissions are exclusive to Owner, while others are shared with Admin and Contributor roles.

These are the permissions the Owner role includes, grouped by product area. A user's role decides what they can do; their Rencore team decides which objects they can see.

Access reviews 7

Approve access review: Also in Admin and Contributor.
Create access review: Also in Admin and Contributor.
Delete access review: Also in Admin and Contributor.
Edit access review: Also in Admin and Contributor.
Export access review schema: Also in Admin and Contributor.
Import access review schema: Also in Admin and Contributor.
Read access report: Also in Admin, Contributor and Reader.

Automations 10

Create automation: Also in Admin and Contributor.
Delete automation: Also in Admin and Contributor.
Edit automation: Also in Admin and Contributor.
Execute actions of criticality high: Also in Admin and Contributor.
Execute actions of criticality low: Also in Admin and Contributor.
Execute actions of criticality medium: Also in Admin and Contributor.
Export automation schema: Also in Admin and Contributor.
Import automation schema: Also in Admin and Contributor.
Read automation: Also in Admin, Contributor and Reader.
Trigger automation: Also in Admin and Contributor.

Policies 6

CreatePolicy: Also in Admin and Contributor.
DeletePolicyPermission: Also in Admin and Contributor.
EditPolicyPermission: Also in Admin and Contributor.
ExportPolicySchema: Also in Admin and Contributor.
ImportPolicySchema: Also in Admin and Contributor.
ReadPolicy: Also in Admin, Contributor and Reader.

Dashboards 8

Create dashboard: Also in Admin and Contributor.
Delete dashboard: Also in Admin and Contributor.
Edit dashboard: Also in Admin and Contributor.
Export dashboard schema: Also in Admin and Contributor.
Import dashboard schema: Also in Admin and Contributor.
Read dashboard: Also in Admin, Contributor and Reader.
Save as...: Also in Admin and Contributor.
Share dashboard: Also in Admin and Contributor.

Data export 2

Cancel export: Only in this built-in role.
Export data: Also in Admin and Contributor.

Environment settings 14

Create Environment: Only in this built-in role.
Delete Environment: Only in this built-in role.
Edit Environment: Also in Admin.
Edit related objects: Also in Admin.
Edit scan intervals: Also in Admin.
Manage consent: Also in Admin.
Manage services: Also in Admin.
Manage subscriptions: Only in this built-in role.
Manage Teams App settings: Also in Admin.
Notifications: Also in Admin.
Open settings: Also in Admin and Contributor.
Set default dashboard: Also in Admin.
Set default homepage: Also in Admin.
View job history: Also in Admin.

Home page 1

Read home: Also in Admin, Contributor and Reader.

Inventory 8

Create segment: Also in Admin and Contributor.
Delete segment: Also in Admin and Contributor.
Edit page: Also in Admin and Contributor.
Edit segment: Also in Admin and Contributor.
Enable/disable inventory: Also in Admin and Contributor.
Export segment schema: Also in Admin and Contributor.
Import segment schema: Also in Admin and Contributor.
Read inventory: Also in Admin, Contributor and Reader.

Provisioning 7

Create provisioning: Also in Admin and Contributor.
Delete provisioning: Also in Admin and Contributor.
Edit provisioning: Also in Admin and Contributor.
Enable\disable provisioning: Also in Admin and Contributor.
Export provisioning schema: Also in Admin and Contributor.
Import provisioning schema: Also in Admin and Contributor.
Read provisioning: Also in Admin, Contributor and Reader.

Reports 7

Create report: Also in Admin and Contributor.
Delete report: Also in Admin and Contributor.
Edit report: Also in Admin and Contributor.
Export report schema: Also in Admin and Contributor.
Import report schema: Also in Admin and Contributor.
Read report: Also in Admin, Contributor and Reader.
Share report: Also in Admin and Contributor.

Reviews 6

Create review: Also in Admin and Contributor.
Delete review: Also in Admin and Contributor.
Edit review: Also in Admin and Contributor.
Enable\disable review: Also in Admin and Contributor.
Read review: Also in Admin, Contributor and Reader.
Trigger review: Also in Admin and Contributor.

Virtual environments 5

Create Virtual Environment: Also in Admin and Contributor.
Delete Virtual Environment: Also in Admin and Contributor.
Edit Virtual Environment: Also in Admin and Contributor.
Manage Virtual Environment: Also in Admin and Contributor.
Read Virtual Environment: Also in Admin and Contributor.

Workspace settings 11

Delete Workspace: Only in this built-in role.
Disable diagnostic data: Only in this built-in role.
Edit Workspace: Also in Admin.
Enable/disable auditing: Only in this built-in role.
Manage API keys: Also in Admin.
Manage mail settings: Also in Admin.
Manage nova integration: Only in this built-in role.
Manage roles: Only in this built-in role.
Manage teams: Also in Admin.
Manage users: Also in Admin.
View audit log: Only in this built-in role.

Frequently asked questions

What can a user with the owner role do?

The Owner role includes 92 permissions in Access reviews, Automations, Policies, Dashboards and 9 more.

Which built-in roles does Rencore Governance have?

Admin, Contributor, Owner and Reader. On the Enterprise Plan you can also build custom roles.

What if the owner role gives too much or too little?

On the Enterprise Plan, build a custom role from any of the permissions when no built-in role fits.

Was this page helpful?