Security & Permissions

---

Understand how to manage permissions:

---

Permissions Page

The Permissions page is your your entry point to manage all permissions. 
This page is accessible from the Settings menu:

---

Role Based Permissions

The security model is based on Roles. A Role is defined by a set of Jira Users or Groups that are allowed to do certain operations based on a list of Permissions.

When creating a Role you must specify :

• the list of Permissions that are required by this role

• the list of Jira users and/or groups who play this role

For example, you can create a new “Deployer” role with the “deploy” permission and associate it to all Jira users who should endorse the role of "Deployer".

---

Change the global Golive Permissions

You can set default permissions globally, without having to set permission at environment level.

In order to set these global Golive permissions, you have to ensure to select Global Permission on top left:

You can then click on Edit to add / remove permissions or user / groups to an existing Role and click on Add Role button to create a new role.

---

Global Golive Permissions

The following permissions are global and are shared by all Environments and Timelines. If a Jira user has one of the following permissions, he will be allowed to perform the allowed operations everywhere in Golive:

Manage Applications

Allows users to create/update/delete applications

Manage Categories

Allows users to create/update/delete environment categories

Manage Calendars

Allows users to create/update/delete environment calendars

Share Calendars

Allows users to share calendars.

Plan Events

Allows users to schedule any Events on the Timeline.

Share Timelines

Allows users to share their own timelines with other users

Apwide Administrator

Allows non Jira Administrators to access all Golive administration features:

• Jira Project Mapping (note that project associations can also be done by projects' administrators)

• Environment Statuses

• Attributes and Custom Properties

• Security & Permissions

---

Create Multiple Environment Permission Schemes

If you have a subset of Environments that should be managed by a dedicated team of users and which required specific permissions, you must create a new Environment Permission Scheme and assign it the relevant environments.

An Environment Permission Scheme allows you to group Environments that share the same lifecycle/owners. Each Environment belongs to only ONE Environment Permissions Scheme but you can define as many different Environment Permission Schemes as you need.

For example, in some companies, the development and integration environments are managed directly by the development and testing team and staging and pre-production environment are managed by a dedicated System or Middleware team.

Another use case would be to avoid showing the full list of environments for a group of users that only works on a limited number of applications and environments.

---

Environment Permissions

An Environment Permission is a set of operations that can be granted by Roles belonging to an Environment Permission Scheme.

Here are the available Environment Permissions you can set at environment level:

Browse Environments

Allows users to view the Environment

Edit Environments

Allows users to edit an existing Environment.

Create and Delete Environments

Allows users to create/delete Environments.

Deploy Version

Allows users to change the deployed version of an Environment

Manage Deployments

Allows users to delete/create new deployment at any date in the past

Change Status

Allows users to change the status of an Environment

View Secured Attributes

Allows users to view secured attributes value

Edit Secured Attributes

Allows users to view and modify secured attributes value

Plan Events

Allows users to schedule Events linked to an Environment