User permissions

Last updated Oct 17, 2026 Settings

AI summary

Rencore Governance permissions are organized by product area, with each permission controlling one specific task. The page lists which built-in roles include each permission, so you can understand why a user can or cannot perform a task, or select the right permissions for a custom role.

Each permission allows one task in Rencore Governance, such as creating a policy or exporting data. The list is grouped by product area and shows which built-in roles include each permission. Use it to check why a user can or cannot do something, or to pick the permissions for a custom role.

Start with

Access reviews 7

Approve access review: Included in Owner, Admin and Contributor.
Create access review: Included in Owner, Admin and Contributor.
Delete access review: Included in Owner, Admin and Contributor.
Edit access review: Included in Owner, Admin and Contributor.
Export access review schema: Included in Owner, Admin and Contributor.
Import access review schema: Included in Owner, Admin and Contributor.
Read access report: Included in Owner, Admin, Contributor and Reader.

Automations 10

Create automation: Included in Owner, Admin and Contributor.
Delete automation: Included in Owner, Admin and Contributor.
Edit automation: Included in Owner, Admin and Contributor.
Execute actions of criticality high: Included in Owner, Admin and Contributor.
Execute actions of criticality low: Included in Owner, Admin and Contributor.
Execute actions of criticality medium: Included in Owner, Admin and Contributor.
Export automation schema: Included in Owner, Admin and Contributor.
Import automation schema: Included in Owner, Admin and Contributor.
Read automation: Included in Owner, Admin, Contributor and Reader.
Trigger automation: Included in Owner, Admin and Contributor.

Dashboards 8

Create dashboard: Included in Owner, Admin and Contributor.
Delete dashboard: Included in Owner, Admin and Contributor.
Edit dashboard: Included in Owner, Admin and Contributor.
Export dashboard schema: Included in Owner, Admin and Contributor.
Import dashboard schema: Included in Owner, Admin and Contributor.
Read dashboard: Included in Owner, Admin, Contributor and Reader.
Save as...: Included in Owner, Admin and Contributor.
Share dashboard: Included in Owner, Admin and Contributor.

Data export 2

Cancel export: Included in Owner.
Export data: Included in Owner, Admin and Contributor.

Environment settings 14

Create Environment: Included in Owner.
Delete Environment: Included in Owner.
Edit Environment: Included in Owner and Admin.
Edit related objects: Included in Owner and Admin.
Edit scan intervals: Included in Owner and Admin.
Manage consent: Included in Owner and Admin.
Manage services: Included in Owner and Admin.
Manage subscriptions: Included in Owner.
Manage Teams App settings: Included in Owner and Admin.
Notifications: Included in Owner and Admin.
Open settings: Included in Owner, Admin and Contributor.
Set default dashboard: Included in Owner and Admin.
Set default homepage: Included in Owner and Admin.
View job history: Included in Owner and Admin.

Home page 1

Read home: Included in Owner, Admin, Contributor and Reader.

Inventory 8

Create segment: Included in Owner, Admin and Contributor.
Delete segment: Included in Owner, Admin and Contributor.
Edit page: Included in Owner, Admin and Contributor.
Edit segment: Included in Owner, Admin and Contributor.
Enable/disable inventory: Included in Owner, Admin and Contributor.
Export segment schema: Included in Owner, Admin and Contributor.
Import segment schema: Included in Owner, Admin and Contributor.
Read inventory: Included in Owner, Admin, Contributor and Reader.

Policies 6

CreatePolicy: Included in Owner, Admin and Contributor.
DeletePolicyPermission: Included in Owner, Admin and Contributor.
EditPolicyPermission: Included in Owner, Admin and Contributor.
ExportPolicySchema: Included in Owner, Admin and Contributor.
ImportPolicySchema: Included in Owner, Admin and Contributor.
ReadPolicy: Included in Owner, Admin, Contributor and Reader.

Provisioning 7

Create provisioning: Included in Owner, Admin and Contributor.
Delete provisioning: Included in Owner, Admin and Contributor.
Edit provisioning: Included in Owner, Admin and Contributor.
Enable\disable provisioning: Included in Owner, Admin and Contributor.
Export provisioning schema: Included in Owner, Admin and Contributor.
Import provisioning schema: Included in Owner, Admin and Contributor.
Read provisioning: Included in Owner, Admin, Contributor and Reader.

Reports 7

Create report: Included in Owner, Admin and Contributor.
Delete report: Included in Owner, Admin and Contributor.
Edit report: Included in Owner, Admin and Contributor.
Export report schema: Included in Owner, Admin and Contributor.
Import report schema: Included in Owner, Admin and Contributor.
Read report: Included in Owner, Admin, Contributor and Reader.
Share report: Included in Owner, Admin and Contributor.

Reviews 6

Create review: Included in Owner, Admin and Contributor.
Delete review: Included in Owner, Admin and Contributor.
Edit review: Included in Owner, Admin and Contributor.
Enable\disable review: Included in Owner, Admin and Contributor.
Read review: Included in Owner, Admin, Contributor and Reader.
Trigger review: Included in Owner, Admin and Contributor.

Virtual environments 5

Create Virtual Environment: Included in Owner, Admin and Contributor.
Delete Virtual Environment: Included in Owner, Admin and Contributor.
Edit Virtual Environment: Included in Owner, Admin and Contributor.
Manage Virtual Environment: Included in Owner, Admin and Contributor.
Read Virtual Environment: Included in Owner, Admin and Contributor.

Workspace settings 11

Delete Workspace: Included in Owner.
Disable diagnostic data: Included in Owner.
Edit Workspace: Included in Owner and Admin.
Enable/disable auditing: Included in Owner.
Manage API keys: Included in Owner and Admin.
Manage mail settings: Included in Owner and Admin.
Manage nova integration: Included in Owner.
Manage roles: Included in Owner.
Manage teams: Included in Owner and Admin.
Manage users: Included in Owner and Admin.
View audit log: Included in Owner.

Frequently asked questions

What is a user permission in Rencore Governance?

One task a user may do, such as creating a policy or exporting data. There are 92 permissions in 13 product areas.

How do I see which roles include a permission?

Every permission on the User permissions page names the built-in roles that include it, and each role page lists its permissions by product area.

How do I give a user a permission that no built-in role includes?

Build a custom role that includes it and give the user that role. Custom roles are only available on the Enterprise Plan.