--- title: "About Cloud Platform permissions" date: "2024-02-14T06:18:38+00:00" summary: "Discover Cloud Platform permissions and roles for effective team management. Learn about 40+ grouped permissions for tasks like code deployment, database management, and domain administration. Understand how to control access and streamline workflows across production and non-production environments." image: type: "page" url: "/acquia-cloud-platform/about-cloud-platform-permissions" id: "bcb5dfda-245e-40ec-80dc-7d78187ef460" --- A _permission_ allows a user to perform specific operations in a Cloud Platform [organization](/acquia-cloud-platform/access/teams/organizations) or [application](/acquia-cloud-platform/manage-apps). Permissions are grouped into [roles](/acquia-cloud-platform/access/teams/roles). Roles are then assigned to team members. All the team members who have the same roles have the same permissions. Acquia defines over 40 separate, grouped permissions, listed in the following [Permissions list](#cloud-permissions-list) table. You can also view all the available permissions by opening the **Roles** page for an organization and viewing a role, as described in [Working with roles and permissions](/acquia-cloud-platform/access/teams/roles). Many permissions distinguish between production and non-production environments. You can allow team members to only work on non-production environments, or grant access to both production and non-production environments. For example, the _Senior developer_ role includes the permissions to pull and deploy code in production and non-production environments, while the _Developer_ role only grants these permissions for non-production environments. Permissions in Cloud Platform don’t control actions users take on your Drupal website, such as: * Creating content * Enabling and configuring Drupal modules * Adding or removing Drupal users Use the Drupal permissions administration to control access to Drupal functions. Notes for Site Factory subscribers Site Factory subscribers must use the Site Factory [domains functionality](../../../site-factory/manage/domains/point/cname-coll.html) to add more domains to their subscriptions. Domains added using the Cloud Platform user interface won’t work, and automated processes may delete them. Permissions list ---------------- The following types of permissions are available to Cloud Platform users: * [Acquia Code Studio permissions](#code-studio-permission) * [Acquia Search permissions](#search-permission) * [Administration permissions](#cloud-permslist-admin) * [Cron permissions](#cloud-permslist-cron) * [Database permissions](#cloud-permslist-db) * [Domain permissions](#cloud-permslist-domains) * [Edge CDN permissions](#edge-cdn) * [Logs permissions](#cloud-permslist-logs) * [Pipelines permissions](#cloud-permslist-pipelines) * [SSH key permissions](#cloud-permslist-sshkeys) * [Infrastructure administration permissions](#cloud-permslist-server) * [Support permissions](#cloud-permslist-support) * [Workflow permissions](#cloud-permslist-workflow) ### Acquia Code Studio permissions Permission Cloud Platform Enterprise Cloud Platform Professional Administer Code Studio for an application **✓** **✓** ### Acquia Search permissions[¶](#search-permissions "Permalink to this heading") Permission Cloud Platform Enterprise Cloud Platform Professional Acquia Search with Solr 7 With this permission, you can create, update, and delete indexes and configuration sets within an application. **✓** **✓** ### Administration permissions Permission Cloud Platform Enterprise Cloud Platform Professional Access the [Cloud Platform API](/acquia-cloud-platform/develop-apps/api)  This permission is not applicable to [Cloud Platform API v2](/acquia-cloud-platform/develop-apps/api/auth). **✓** **✓** Access to legacy product keys  This permission gives you access to legacy product keys. **✓** **✓** [Add application tags](/acquia-cloud-platform/manage-apps/cloud-platform-interface/tags#cloud-app-tag-add) **✓** **✓** Add or remove a user of a team  This permission enables users to assign themselves any user’s role, including the Team Lead role. **✓** **✓** [Delete application tags](/acquia-cloud-platform/manage-apps/cloud-platform-interface/tags#cloud-app-tag-remove) **✓** **✓** Edit [Remote administration](/acquia-cms/ra) **✓** **✓** View [Remote administration](/acquia-cms/ra) **✓** **✓** ### Cron permissions Permission Cloud Platform Enterprise Cloud Platform Professional Modify [cron tasks](/acquia-cloud-platform/manage-apps/cron) for non-production environments **✓** **✓** Modify [cron tasks](/acquia-cloud-platform/manage-apps/cron) for the production environment **✓** **✓** ### Database permissions Permission Cloud Platform Enterprise Cloud Platform Professional [Add a database](/acquia-cloud-platform/manage-apps/database) **✓** **✓** Create [database backups](/acquia-cloud-platform/manage-apps/back-up#cloud-db-backups) for non-production environments **✓** **✓** Create [database backups](/acquia-cloud-platform/manage-apps/back-up#cloud-db-backups) for the production environment **✓** **✓** [Download database backups](/acquia-cloud-platform/manage-apps/back-up#cloud-make-use-db-backups) for non-production environments **✓** **✓** [Download database backups](/acquia-cloud-platform/manage-apps/back-up#cloud-make-use-db-backups) for the production environment **✓** **✓** [Remove a database](/acquia-cloud-platform/manage-apps/database#cloud-delete-db) **✓** **✓** [Restore database backups](/acquia-cloud-platform/manage-apps/back-up#cloud-restore-db-backups) for non-production environments **✓** **✓** [Restore database backups](/acquia-cloud-platform/manage-apps/back-up#cloud-restore-db-backups) for the production environment **✓** **✓** View [database connection details](/acquia-cloud-platform/manage-apps/database#cloud-db-creds) (username, password, or hostname) **✓** **✓** ### Domain permissions Permission Cloud Platform Enterprise Cloud Platform Professional [Add or remove SSL certificates](/acquia-cloud-platform/manage-apps/ssl/cert#cloud-install-ssl-cert) for non-production environments **✓** **✓** [Add or remove SSL certificates](/acquia-cloud-platform/manage-apps/ssl/cert#cloud-install-ssl-cert) for production environments **✓** **✓** [Add or remove domains](/acquia-cloud-platform/manage-apps/domains#cloud-add-domain-name) for non-production environments **✓** **✓** [Add or remove domains](/acquia-cloud-platform/manage-apps/domains#cloud-add-domain-name) for production environment **✓** **✓** ### Logs permissions Permission Cloud Platform Enterprise Cloud Platform Professional Administer [log forwarding](/acquia-cloud-platform/monitor-apps/logs/forwarding) for non-production environments **✓** **𐄂** Administer [log forwarding](/acquia-cloud-platform/monitor-apps/logs/forwarding) for the production environment **✓** **𐄂** [Download logs](/acquia-cloud-platform/monitor-apps/logs#cloud-download-logs-ui) for non-production environments **✓** **✓** [Download logs](/acquia-cloud-platform/monitor-apps/logs#cloud-download-logs-ui) for the production environment **✓** **✓** ### Edge CDN permissions Permission Cloud Platform Enterprise Cloud Platform Professional Administer Edge CDN **✓** **✓** ### Pipelines permissions Permission Cloud Platform Enterprise Cloud Platform Professional [Execute Pipelines](/acquia-cloud-platform/features/pipelines/ui) **✓** **✓** ### SSH key permissions Permission Cloud Platform Enterprise Cloud Platform Professional [Add SSH key](/acquia-cloud-platform/manage-apps/command-line/ssh/getting-started/add-key) to Git repository **✓** **✓** [Add SSH key](/acquia-cloud-platform/manage-apps/command-line/ssh/getting-started/add-key#ssh-using-key) to non-production environments **✓** **✓** [Add SSH key](/acquia-cloud-platform/manage-apps/command-line/ssh/getting-started/add-key#ssh-using-key) to the production environment **✓** **✓** ### Infrastructure administration permissions[¶](#search-permissions "Permalink to this heading") Permission Cloud Platform Enterprise Cloud Platform Professional [Configure server](https://drc-cms.acquia.com/acquia-cloud-platform/manage-apps/infrastructure) **𐄂** **✓** [Reboot server](https://drc-cms.acquia.com/acquia-cloud-platform/manage-apps/infrastructure#cloud-server-actions) **𐄂** **✓** [Resize server](https://drc-cms.acquia.com/acquia-cloud-platform/manage-apps/infrastructure#cloud-server-actions) **𐄂** **✓** [Suspend server](https://drc-cms.acquia.com/acquia-cloud-platform/manage-apps/infrastructure#cloud-server-actions) **𐄂** **✓** ### Support permissions Permission Cloud Platform Enterprise Cloud Platform Professional [Create a Support ticket](/service-offerings/support#contact-acquia-support) **✓** **✓** [Include as a collaborator](/service-offerings/tickets#support-tickets-sharing) on all tickets by default  _(Permission is assignable to no more than 20 users. Administrators have priority for inclusion.)_ **✓** **✓** View and edit any [Support tickets](/service-offerings/tickets) for a subscription **✓** **✓** ### Workflow permissions Permission Cloud Platform Enterprise Cloud Platform Professional [Add a CD environment](/acquia-cloud-platform/features/cd/env) **✓** **𐄂** [Clear caches for non-production environments](/acquia-cloud-platform/performance/varnish#cloud-clear-varnish) **✓** **✓** [Clear caches for the production environment](/acquia-cloud-platform/performance/varnish#cloud-clear-varnish) **✓** **✓** [Configure non-production environments](/acquia-cloud-platform/manage-apps/configure) **✓** **✓** [Configure production environment](/acquia-cloud-platform/manage-apps/configure) **✓** **✓** Create and manage own [remote IDEs](/acquia-cloud-platform/add-ons/ide/start) **✓** **✓** [Delete a CD environment](/acquia-cloud-platform/features/cd/env#cd-delete-env-ui) **✓** **𐄂** Deploy [code](/acquia-cloud-platform/manage-apps/code/environments), [files](/acquia-cloud-platform/manage-apps/files), or [databases](/acquia-cloud-platform/manage-apps/database#cloud-copy-db-envs) to the production environment **✓** **✓** [Managing CDN](/acquia-cloud-platform/features/platformcdn#platformcdn-provision) (provisioning/deprovisioning the CDN) for production environment **✓** **✓** [Managing CDN](/acquia-cloud-platform/features/platformcdn#platformcdn-provision) for non-production environment **✓** **✓** Manage Cloud Actions on non-production environments **✓** **✓** Manage Cloud Actions on production environments **✓** **✓** Manage any Cloud IDEs **✓** **✓** Manage [environment variables](/acquia-cloud-platform/manage-apps/variables) on a non-production environment **✓** **𐄂** Manage [environment variables](/acquia-cloud-platform/manage-apps/variables) on a production environment **✓** **𐄂** [Move files](/acquia-cloud-platform/manage-apps/files) from non-production environments **✓** **✓** [Move files](/acquia-cloud-platform/manage-apps/files) from production environments **✓** **✓** [Move files](/acquia-cloud-platform/manage-apps/files) to non-production environments **✓** **✓** [Move files](/acquia-cloud-platform/manage-apps/files) to the production environment **✓** **✓** Pull and deploy [code](/acquia-cloud-platform/manage-apps/code/environments), [files](/acquia-cloud-platform/manage-apps/files), or [databases](/acquia-cloud-platform/manage-apps/database#cloud-copy-db-envs) to non-production environments  Also grants the ability to [enable or disable Live Development](/acquia-cloud-platform/manage-apps/code/livedev#cloud-enable-livedev). **✓** **✓** Pull [files](/acquia-cloud-platform/manage-apps/files) or [databases](/node/56311#copying-database-environments) from the production environment **✓** **✓** View [environment variables](/acquia-cloud-platform/manage-apps/variables) on a non-production environment **✓** **𐄂** View [environment variables](/acquia-cloud-platform/manage-apps/variables) on a production environment **✓** **𐄂** Cloud Platform API endpoints for permissions -------------------------------------------- The [Cloud Platform API](/acquia-cloud-platform/develop-apps/api) provides endpoints for permission management, including: * [List all available permissions](https://cloudapi-docs.acquia.com/#operation/getPermissions) * [List permissions for a user and application](https://cloudapi-docs.acquia.com/#operation/getApplicationPermissions) * [Return whether your account has access to a specific application permission](https://cloudapi-docs.acquia.com/#operation/getAccountApplicationHasPermission) * [Return whether your account has access to a specific team permission](https://cloudapi-docs.acquia.com/#operation/getAccountTeamHasPermission) Deprecated permissions ---------------------- Acquia deprecates permissions when the associated feature or API endpoint is deprecated or scheduled to be deprecated.