About permissions

A permission grants a user the ability to perform specific operations in an Acquia subscription. Permissions are grouped into roles. Roles are then assigned to team members. All the team members who have the same roles have the same permissions.

Acquia defines over 40 separate permissions, grouped into these categories:

  • Administration
  • Cron
  • Databases
  • Domains
  • Insight
  • Logs
  • Search
  • Server administration
  • SSH keys
  • Support tickets
  • Workflow

The available permissions are listed in the List of permissions table. You can also view all the available permissions by opening the Manage roles page and edit a role, as described in Working with roles and permissions: Editing a role.

Many permissions enable you to distinguish between team members who can work on a site's production environment and team members who can only work on the non-production (Dev and Stage) environments. For example, the Senior Developer role includes the permissions to pull and deploy code in production and non-production environments, while the Developer role grants permission to to pull and deploy code only in non-production environments. Since Acquia Cloud Free sites do not have production environments, those permissions do not apply to those sites.

Permissions in Acquia subscriptions do not control actions users take on your Drupal site, such as:

  • Creating content
  • Enabling and configuring Drupal modules
  • Adding or removing Drupal users

Use the Drupal permissions administration to control access to Drupal functions.

List of permissions

PermissionAcquia Cloud EnterpriseAcquia Cloud ProfessionalAcquia Cloud FreeAcquia subscription only
Administration
Add or remove a user of a team. This includes the ability to assign a user's role, and therefore allows a user with this permission give themselves any role, including Team Lead. Yes Yes Yes Yes
Access the Cloud API.
Using the Cloud API, authorized users can bypass all other permissions, using command-line tools.
Yes Yes Yes -
Activate an Acquia subscription add-on. Yes Yes Yes Yes
Cron
Modify cron tasks for non-production environments. Yes Yes Yes -
Modify cron tasks for the production environment. Yes Yes - -
Databases
Add a database. Yes Yes Yes -
Remove a database. Yes Yes Yes -
View database connection details (username, password, or hostname). Yes Yes Yes -
Download database backups for non-production environments. Yes Yes Yes -
Download database backups for the production environment. Yes Yes - -
Create database backups for non-production environments. Yes Yes Yes -
Create database backups for the production environment. Yes Yes - -
Restore database backups for non-production environments. Yes Yes Yes -
Restore database backups for the production environment. Yes Yes - -
Domains
Add or remove domains to non-production environments. Yes Yes - -
Add or remove domains to the production environment. Yes Yes - -
Add or remove SSL Certificates. Yes Yes -
Insight
Manage Insight alerts.
Users with this permission can set Insight alerts to 'Ignore' and can also change Drupal settings using the Fix-it-now feature.
Yes Yes Yes Yes
Manage Insight site groups. Yes Yes Yes Yes
Logs
Download logs for non-production environments. Yes Yes Yes -
Download logs for the production environment. Yes Yes - -
Search
Increase the search index limit on a subscription. Yes Yes Yes Yes
Edit the search schema on a subscription. Yes Yes Yes Yes
Server administration
Reboot server. - Yes - -
Resize server. - Yes - -
Suspend server. - Yes - -
Configure server. - Yes - -
SSH keys
Add SSH key to git repository. Yes Yes Yes -
Add SSH key to non-production environments. Yes Yes Yes -
Add SSH key to production environment. Yes Yes Yes -
Support
Create a support ticket. Yes Yes - Yes
View and edit any support tickets for a subscription. Yes Yes - Yes
Include as a collaborator on all tickets by default. Yes Yes - Yes
Workflow
Pull and deploy code, files, or databases to non-production environments.
Also grants the ability to enable or disable live development.
Yes Yes Yes -
Deploy code, files, or databases to the production environment. Yes Yes - -
Pull files or databases from the production environment. Yes Yes - -
Move files to non-production environments. Yes Yes Yes -
Move files to the production environment. Yes Yes - -
Move files from production environments. Yes Yes - -
Move files from non-production environments. Yes Yes Yes -
Clear Varnish cache for non-production environments. Yes Yes Yes -
Clear Varnish cache for the production environment. Yes Yes - -
Configure production environment. Yes Yes - -
Configure non-production environments. Yes Yes - -