Role Permission Details
In Apinizer, it is impossible for a user to access a project without authorization, or even perform an action within that project that is outside their authorization level. Users must have a role(s) to be able to perform actions in any project.
This page contains detailed permission matrices for project-level roles. For the general authorization model and system-level roles, see the Authorization Matrix page.
If a user or team needs more or fewer permissions than those in the default roles, a new role can be created that can be fully customized accordingly.
Creating a New Role
The image below contains the role creation settings:
Default Roles and Permissions
The permissions below are the defaults created on a new installation. A system administrator can edit the roles later, so the roles in your installation may differ.
Project Owner
Description: Role with all permissions in the project. Cannot be deleted.
Permissions:
Project Owner has every action in every category. The table shows the actions each category supports.
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| API Management | ✓ | ✓ | ✓ | - | ✓ |
| API Creator | ✓ | ✓ | - | - | ✓ |
| API Integrator | ✓ | ✓ | - | ✓ | - |
| Global Settings | ✓ | ✓ | - | - | ✓ |
| Connections | ✓ | ✓ | - | - | ✓ |
| Identity & Access Control | ✓ | ✓ | - | - | ✓ |
| Secrets & Certificates | ✓ | ✓ | - | - | ✓ |
| Monitoring | ✓ | ✓ | - | - | - |
| Analytics & Reports | ✓ | ✓ | - | - | - |
| Audit & Application Logs | ✓ | - | - | - | - |
| Testing | ✓ | ✓ | - | ✓ | - |
| Promotion | ✓ | ✓ | - | - | - |
| Project Management | ✓ | ✓ | - | - | ✓ |
| AI Development | ✓ | ✓ | ✓ | - | ✓ |
| AI Budgets | ✓ | ✓ | - | - | ✓ |
| AI Analytics | ✓ | - | - | - | ✓ |
| Data Lifecycle | ✓ | ✓ | - | ✓ | - |
API Developer
Description: Role that can manage API Proxies, deploy, and perform integration operations.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| API Management | ✓ | ✓ | ✓ | - | ✓ |
| API Creator | ✓ | ✓ | - | - | ✓ |
| API Integrator | ✓ | ✓ | - | ✓ | - |
| Global Settings | ✓ | ✓ | - | - | ✓ |
| Connections | ✓ | ✓ | - | - | ✓ |
| Identity & Access Control | ✓ | ✓ | - | - | ✓ |
| Secrets & Certificates | ✓ | ✓ | - | - | ✓ |
| Monitoring | ✓ | ✓ | - | - | - |
| Analytics & Reports | ✓ | ✓ | - | - | - |
| Audit & Application Logs | ✓ | - | - | - | - |
| Testing | ✓ | - | - | ✓ | - |
| Project Management | ✓ | ✓ | - | - | ✓ |
API Manager
Description: Role that can manage APIs, perform analysis and monitoring.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| API Management | ✓ | ✓ | ✓ | - | ✓ |
| API Creator | ✓ | - | - | - | - |
| API Integrator | ✓ | - | - | - | - |
| Global Settings | ✓ | - | - | - | - |
| Connections | ✓ | - | - | - | - |
| Identity & Access Control | ✓ | - | - | - | - |
| Secrets & Certificates | ✓ | - | - | - | - |
| Monitoring | ✓ | ✓ | - | - | - |
| Analytics & Reports | ✓ | ✓ | - | - | - |
| Audit & Application Logs | ✓ | - | - | - | - |
| Testing | ✓ | - | - | ✓ | - |
| Project Management | ✓ | ✓ | - | - | ✓ |
API Creator
Description: Role that can perform API creation operations such as DB to API, Script to API, Mock API.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| API Management | ✓ | - | - | - | - |
| API Creator | ✓ | ✓ | - | - | ✓ |
| API Integrator | ✓ | - | - | - | - |
| Global Settings | ✓ | - | - | - | - |
| Connections | ✓ | - | - | - | - |
| Identity & Access Control | ✓ | - | - | - | - |
| Secrets & Certificates | ✓ | - | - | - | - |
| Monitoring | ✓ | - | - | - | - |
| Analytics & Reports | ✓ | - | - | - | - |
| Audit & Application Logs | ✓ | - | - | - | - |
| Testing | ✓ | - | - | ✓ | - |
| Project Management | ✓ | ✓ | - | - | ✓ |
API Security
Description: Role that manages identity management, credentials, certificates, and connection security.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| API Management | ✓ | - | - | - | - |
| Global Settings | ✓ | - | - | - | ✓ |
| Connections | ✓ | ✓ | - | - | ✓ |
| Identity & Access Control | ✓ | ✓ | - | - | ✓ |
| Secrets & Certificates | ✓ | ✓ | - | - | ✓ |
| Monitoring | ✓ | - | - | - | - |
| Analytics & Reports | ✓ | - | - | - | - |
| Audit & Application Logs | ✓ | - | - | - | - |
| Testing | ✓ | - | - | ✓ | - |
| Project Management | ✓ | ✓ | - | - | ✓ |
API Analytics
Description: Role that can perform analysis and reporting operations.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| API Management | ✓ | - | - | - | - |
| API Integrator | ✓ | - | - | - | - |
| Monitoring | ✓ | - | - | - | - |
| Analytics & Reports | ✓ | ✓ | - | - | - |
| Audit & Application Logs | ✓ | - | - | - | - |
| Project Management | ✓ | ✓ | - | - | ✓ |
API Tester
Description: Role that can perform test operations.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| API Management | ✓ | - | - | - | - |
| API Creator | ✓ | - | - | - | - |
| API Integrator | ✓ | - | - | - | - |
| Connections | ✓ | - | - | - | - |
| Identity & Access Control | ✓ | - | - | - | - |
| Secrets & Certificates | ✓ | - | - | - | - |
| Testing | ✓ | ✓ | - | ✓ | - |
| Project Management | ✓ | ✓ | - | - | ✓ |
AI Admin
Description: Role with full control over AI development, AI budgets and AI analytics.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| AI Development | ✓ | ✓ | ✓ | - | ✓ |
| AI Budgets | ✓ | ✓ | - | - | ✓ |
| AI Analytics | ✓ | - | - | - | ✓ |
AI Developer
Description: Role that manages, moves and deploys AI assets, and views AI budgets and AI analytics.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| AI Development | ✓ | ✓ | ✓ | - | ✓ |
| AI Budgets | ✓ | - | - | - | - |
| AI Analytics | ✓ | - | - | - | - |
AI Analytics
Description: Role with read-only observation of AI development, AI budgets and AI analytics.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| AI Development | ✓ | - | - | - | - |
| AI Budgets | ✓ | - | - | - | - |
| AI Analytics | ✓ | - | - | - | - |
AI Finance
Description: Role that only views AI budgets/cost and AI analytics.
Permissions:
| Category | View | Manage | Deploy/Undeploy | Execute | Export/Import |
|---|---|---|---|---|---|
| AI Budgets | ✓ | - | - | - | - |
| AI Analytics | ✓ | - | - | - | - |
Automatic Permission Expansion
This expansion is a data migration step that ran once during the upgrade to version 202601-05: the following extra permissions were added to the roles that existed at that time. It is not applied automatically when a role is saved or when a request is made; grant these permissions explicitly on roles you create or edit.
- API Developer (if API Management Manage exists): API Integrator Execute, Connections Manage, Identity & Access Control Manage, Secrets & Certificates Manage
- API Creator (if API Creator Manage exists): API Integrator View, Monitoring View, Analytics & Reports View, Audit & Application Logs View
- API Security (if Identity & Access Control Manage exists): Monitoring View, Analytics & Reports View, Testing View+Execute
- API Analytics (if Analytics & Reports View exists): API Integrator View
- API Tester (if Testing Execute exists): Testing Manage, API Integrator View, Connections View, Identity & Access Control View, Secrets & Certificates View