Information for: DEVELOPERS   PARTNERS

About Cloud Platform permissions

A permission allows a user to perform specific operations in a Cloud Platform organization or application. Permissions are grouped into roles. Roles are then assigned to team members. All the team members who have the same roles have the same permissions.

Acquia defines over 40 separate, grouped permissions, listed in the following Permissions list table. You can also view all the available permissions by opening the Roles page for an organization and viewing a role, as described in Working with roles and permissions.

Many permissions distinguish between production and non-production environments. You can allow team members to only work on non-production environments, or grant access to both production and non-production environments. For example, the Senior developer role includes the permissions to pull and deploy code in production and non-production environments, while the Developer role only grants these permissions for non-production environments.

Note for Cloud Platform Free users

Permissions for production environments don’t apply to Cloud Platform Free applications, as they don’t have production environments.

Permissions in Cloud Platform don’t control actions users take on your Drupal website, such as:

  • Creating content
  • Enabling and configuring Drupal modules
  • Adding or removing Drupal users

Use the Drupal permissions administration to control access to Drupal functions.

Notes for Site Factory subscribers

  • Site Factory subscribers must use the Site Factory domains functionality to add more domains to heir subscriptions. Domains added using the Cloud Platform user interface won’t work, and automated processes may delete them.
  • For more information about Cloud Platform permissions as part of an Site Factory subscription, see Configuring your Cloud Platform teams and permissions.

Permissions list

The following types of permissions are available to Cloud Platform users:

Administration permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free

Access the Cloud Platform API

(Required for Cloud Platform API v1 and Dev Desktop users. Not applicable for Cloud Platform API v2.)

yes yes yes
Add or remove a user of a team
This includes the ability to assign a user’s role, allowing a user with this permission give themselves any role, including Team Lead.
yes yes yes
Add application tags yes yes yes
Delete application tags yes yes yes
Edit Remote administration yes yes no
View Remote administration yes yes no

Cron permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Modify cron tasks for non-production environments yes yes yes
Modify cron tasks for the production environment yes yes no

Database permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Add a database yes yes yes
Create database backups for non-production environments yes yes yes
Create database backups for the production environment yes yes no
Download database backups for non-production environments yes yes yes
Download database backups for the production environment yes yes no
Remove a database yes yes yes
Restore database backups for non-production environments yes yes yes
Restore database backups for the production environment yes yes no
View database connection details (username, password, or hostname) yes yes yes

Domain permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Add or remove SSL certificates for the non-production environments yes yes no
Add or remove SSL certificates for the production environments yes yes no
Add or remove domains for non-production environments yes yes no
Add or remove domains for the production environment yes yes no

Insight permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Block Insight sites
Users with this permission can prevent applications from submitting data to Acquia Insight.
yes yes yes
Manage Insight alerts
Users with this permission can set Insight alerts to Ignore.
yes yes yes
Revoke Insight environment yes yes yes

Logs permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Administer log forwarding for non-production environments yes no no
Administer log forwarding for the production environment yes no no
Download logs for non-production environments yes yes yes
Download logs for the production environment yes yes no

Pipelines permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Execute pipelines yes yes no

SSH key permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Add SSH key to Git repository yes yes yes
Add SSH key to non-production environments yes yes yes
Add SSH key to the production environment yes yes no

Search permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Edit the search schema on a subscription yes yes no
Increase the search index limit on a subscription yes yes no

Server administration permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Configure server no yes no
Reboot server no yes no
Resize server no yes no
Suspend server no yes no

Support permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Create a support ticket yes yes no
Include as a collaborator on all tickets by default
(Permission is assignable to no more than 20 users. Administrators have priority for inclusion.)
yes yes no
View and edit any support tickets for a subscription yes yes no

Workflow permissions

Permission Cloud Platform Enterprise Cloud Platform Professional Cloud Platform Free
Add an environment yes no no
Clear Varnish® cache for non-production environments yes yes yes
Clear Varnish® cache for the production environment yes yes no
Configure non-production environments yes yes no
Configure production environment yes yes no
Create and manage own remote IDEs yes yes yes
Delete an environment yes no no
Deploy code, files, or databases to the production environment yes yes no
Manage any remote IDEs yes yes yes
Manage environment variables on a non-production environment yes no no
Manage environment variables on a production environment yes no no
Move files from non-production environments yes yes yes
Move files from production environments yes yes no
Move files to non-production environments yes yes yes
Move files to the production environment yes yes no
Pull and deploy code, files, or databases to non-production environments
Also grants the ability to enable or disable Live Development.
yes yes yes
Pull files or databases from the production environment yes yes no
View environment variables on a non-production environment yes no no
View environment variables on a production environment yes no no