Skip to content

Commit 291f6b3

Browse files
authored
fix operations permitted per role table (#1933)
1 parent 1b83856 commit 291f6b3

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

docs/deployment/teams.md

+7-5
Original file line numberDiff line numberDiff line change
@@ -144,7 +144,7 @@ _**Figure**. A member's view of the Projects page. It displays projects that are
144144

145145
| Capability | Member | Manager | Admin | Notes |
146146
| ---- | ------ | ------- | ----- | ----- |
147-
| Create or edit projects | ❌ No | ❌ No | ✅ Yes | |
147+
| Create or edit projects | ⚠️ Restricted | ⚠️ Restricted | ✅ Yes | |
148148
| Change policies | ❌ No | ❌ No | Yes | |
149149
| Triage findings | ⚠️ Restricted | ⚠️ Restricted | Yes | Members can perform all triage operations on Projects assigned to them. |
150150
| Assign roles | ❌ No | ❌ No | Yes | |
@@ -154,12 +154,14 @@ _**Figure**. A member's view of the Projects page. It displays projects that are
154154
| Delete subteams | ❌ No | ✅ Yes | Yes | A manager can delete the subteams they are a manager of, provided that there are no resources, such as projects, assigned to the subteam. |
155155
| API | ❌ No | ❌ No | Yes | |
156156

157+
:::info
158+
Members and managers can create projects by scanning a repository using the Semgrep CLI tool, but they can't access the project related to the repository in Semgrep AppSec Platform unless an admin provides them explicit access to the project.
159+
:::
160+
157161
## How team access works
158162

159-
- Members of a top-level team gain access to the projects of its subteams. They are indirect members of a subteam.
160-
<!-- vale off -->
161-
- Members of a subteam do not have access to the projects of teams or subteams above it.
162-
<!-- vale on -->
163+
- Members of a top-level team gain access to the projects of its subteams. They are indirect members of a subteam.<!-- vale off -->
164+
- Members of a subteam do not have access to the projects of teams or subteams above it.<!-- vale on -->
163165

164166
In the following diagram, team 1 gains access to subteam 1b's projects, but team 1b does not gain access to projects from team 1.
165167

0 commit comments

Comments
 (0)