> ## Documentation Index
> Fetch the complete documentation index at: https://docs.apinizer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Role Permission Details

> You can view detailed permission matrices of predefined project-level roles in Apinizer. You can learn which actions each role has in which asset categories.

<Info>
  In Apinizer, it is impossible for a user to access a project without authorization, or even perform an action within
  that project that is outside their authorization level. Users must have a role(s) to be able to perform actions in
  any project.
</Info>

<Info>
  This page contains detailed permission matrices for project-level roles. For the general authorization model and
  system-level roles, see the [Authorization Matrix](/en/admin/user-access-management/authorization-matrix) page.
</Info>

If a user or team needs more or fewer permissions than those in the default roles, a new role can be created that can be fully customized accordingly.

## Creating a New Role

The image below contains the role creation settings:

<img src="https://mintcdn.com/apinizer/yP2RAYjBuwHg4VEt/images/yonetici/roles.png?fit=max&auto=format&n=yP2RAYjBuwHg4VEt&q=85&s=fed029cff33c2f6ac7a7eb9f6c93cf4a" alt="Rol Oluşturma" width="1000" height="800" data-path="images/yonetici/roles.png" />

## Default Roles and Permissions

## Project Owner

**Description**: Role with all permissions in the project. Cannot be deleted or edited.

**Permissions**: All actions in all categories

| Category                  | View | Manage | Deploy/Undeploy | Execute | Export/Import |
| ------------------------- | ---- | ------ | --------------- | ------- | ------------- |
| API Management            | ✓    | ✓      | ✓               | -       | ✓             |
| API Creator               | ✓    | ✓      | -               | -       | ✓             |
| API Integrator            | ✓    | ✓      | -               | ✓       | -             |
| Global Settings           | ✓    | ✓      | -               | -       | ✓             |
| Connections               | ✓    | ✓      | -               | -       | ✓             |
| Identity & Access Control | ✓    | ✓      | -               | -       | -             |
| Secrets & Certificates    | ✓    | ✓      | -               | -       | ✓             |
| Monitoring                | ✓    | ✓      | -               | -       | -             |
| Analytics & Reports       | ✓    | -      | -               | -       | -             |
| Audit & Application Logs  | ✓    | -      | -               | -       | -             |
| Testing                   | ✓    | -      | -               | ✓       | -             |
| Project Management        | ✓    | ✓      | -               | -       | ✓             |

## API Developer

**Description**: Role that can manage API Proxies, deploy, and perform integration operations.

**Permissions**:

| Category                  | View | Manage | Deploy/Undeploy | Execute | Export/Import |
| ------------------------- | ---- | ------ | --------------- | ------- | ------------- |
| API Management            | ✓    | ✓      | ✓               | -       | ✓             |
| API Creator               | ✓    | ✓      | -               | -       | ✓             |
| API Integrator            | ✓    | ✓      | -               | ✓       | -             |
| Global Settings           | ✓    | ✓      | -               | -       | ✓             |
| Connections               | ✓    | ✓      | -               | -       | ✓             |
| Identity & Access Control | ✓    | ✓      | -               | -       | -             |
| Secrets & Certificates    | ✓    | ✓      | -               | -       | ✓             |
| Monitoring                | ✓    | ✓      | -               | -       | -             |
| Analytics & Reports       | ✓    | -      | -               | -       | -             |
| Audit & Application Logs  | ✓    | -      | -               | -       | -             |
| Testing                   | ✓    | -      | -               | ✓       | -             |
| Project Management        | ✓    | ✓      | -               | -       | ✓             |

**Note**: If API Management Manage permission exists, the system automatically adds API Integrator Execute, Connections Manage, Identity & Access Control Manage, and Secrets & Certificates Manage permissions.

## API Manager

**Description**: Role that can manage APIs, perform analysis and monitoring.

**Permissions**:

| Category            | VIEW | MANAGE | DEPLOY\_UNDEPLOY | EXECUTE | EXPORT\_IMPORT |
| ------------------- | ---- | ------ | ---------------- | ------- | -------------- |
| API\_MANAGEMENT     | ✓    | ✓      | ✓                | -       | ✓              |
| API\_CREATOR        | ✓    | -      | -                | -       | -              |
| API\_INTEGRATOR     | ✓    | -      | -                | -       | -              |
| GLOBAL\_SETTINGS    | ✓    | -      | -                | -       | -              |
| CONNECTIONS         | ✓    | -      | -                | -       | -              |
| IDENTITY            | ✓    | -      | -                | -       | -              |
| SECRETS             | ✓    | -      | -                | -       | -              |
| MONITORING          | ✓    | ✓      | -                | -       | -              |
| ANALYTICS           | ✓    | -      | -                | -       | -              |
| AUDIT               | ✓    | -      | -                | -       | -              |
| TESTING             | ✓    | -      | -                | ✓       | -              |
| PROJECT\_MANAGEMENT | ✓    | ✓      | -                | -       | ✓              |

## API Creator

**Description**: Role that can perform API creation operations such as DB to API, Script to API, Mock API.

**Permissions**:

| Category            | VIEW | MANAGE | DEPLOY\_UNDEPLOY | EXECUTE | EXPORT\_IMPORT |
| ------------------- | ---- | ------ | ---------------- | ------- | -------------- |
| API\_MANAGEMENT     | ✓    | -      | -                | -       | -              |
| API\_CREATOR        | ✓    | ✓      | -                | -       | ✓              |
| API\_INTEGRATOR     | ✓    | -      | -                | -       | -              |
| GLOBAL\_SETTINGS    | ✓    | -      | -                | -       | -              |
| CONNECTIONS         | ✓    | -      | -                | -       | -              |
| IDENTITY            | ✓    | -      | -                | -       | -              |
| SECRETS             | ✓    | -      | -                | -       | -              |
| MONITORING          | ✓    | -      | -                | -       | -              |
| ANALYTICS           | ✓    | -      | -                | -       | -              |
| AUDIT               | ✓    | -      | -                | -       | -              |
| TESTING             | ✓    | -      | -                | ✓       | -              |
| PROJECT\_MANAGEMENT | ✓    | ✓      | -                | -       | ✓              |

**Note**: If API Creator Manage permission exists, the system automatically adds API Integrator View, Monitoring View, Analytics & Reports View, and Audit & Application Logs View permissions.

## API Security

**Description**: Role that manages identity management, credentials, certificates, and connection security.

**Permissions**:

| Category            | VIEW | MANAGE | DEPLOY\_UNDEPLOY | EXECUTE | EXPORT\_IMPORT |
| ------------------- | ---- | ------ | ---------------- | ------- | -------------- |
| API\_MANAGEMENT     | ✓    | -      | -                | -       | -              |
| API\_CREATOR        | -    | -      | -                | -       | -              |
| API\_INTEGRATOR     | -    | -      | -                | -       | -              |
| GLOBAL\_SETTINGS    | ✓    | -      | -                | -       | ✓              |
| CONNECTIONS         | ✓    | ✓      | -                | -       | ✓              |
| IDENTITY            | ✓    | ✓      | -                | -       | ✓              |
| SECRETS             | ✓    | ✓      | -                | -       | ✓              |
| MONITORING          | ✓    | -      | -                | -       | -              |
| ANALYTICS           | ✓    | -      | -                | -       | -              |
| AUDIT               | ✓    | -      | -                | -       | -              |
| TESTING             | ✓    | -      | -                | ✓       | -              |
| PROJECT\_MANAGEMENT | ✓    | ✓      | -                | -       | ✓              |

**Note**: If Identity & Access Control Manage permission exists, the system automatically adds Monitoring View, Analytics & Reports View, and Testing View+Execute permissions.

## API Analytics

**Description**: Role that can perform analysis and reporting operations.

**Permissions**:

| Category            | VIEW | MANAGE | DEPLOY\_UNDEPLOY | EXECUTE | EXPORT\_IMPORT |
| ------------------- | ---- | ------ | ---------------- | ------- | -------------- |
| API\_MANAGEMENT     | ✓    | -      | -                | -       | -              |
| API\_CREATOR        | -    | -      | -                | -       | -              |
| API\_INTEGRATOR     | ✓    | -      | -                | -       | -              |
| GLOBAL\_SETTINGS    | -    | -      | -                | -       | -              |
| CONNECTIONS         | -    | -      | -                | -       | -              |
| IDENTITY            | -    | -      | -                | -       | -              |
| SECRETS             | -    | -      | -                | -       | -              |
| MONITORING          | ✓    | -      | -                | -       | -              |
| ANALYTICS           | ✓    | ✓      | -                | -       | -              |
| AUDIT               | ✓    | -      | -                | -       | -              |
| TESTING             | -    | -      | -                | -       | -              |
| PROJECT\_MANAGEMENT | ✓    | ✓      | -                | -       | ✓              |

**Note**: If Analytics & Reports View permission exists, the system automatically adds API Integrator View permission.

## API Tester

**Description**: Role that can perform test operations.

**Permissions**:

| Category            | VIEW | MANAGE | DEPLOY\_UNDEPLOY | EXECUTE | EXPORT\_IMPORT |
| ------------------- | ---- | ------ | ---------------- | ------- | -------------- |
| API\_MANAGEMENT     | ✓    | -      | -                | -       | -              |
| API\_CREATOR        | ✓    | -      | -                | -       | -              |
| API\_INTEGRATOR     | ✓    | -      | -                | -       | -              |
| GLOBAL\_SETTINGS    | -    | -      | -                | -       | -              |
| CONNECTIONS         | ✓    | -      | -                | -       | -              |
| IDENTITY            | ✓    | -      | -                | -       | -              |
| SECRETS             | ✓    | -      | -                | -       | -              |
| MONITORING          | -    | -      | -                | -       | -              |
| ANALYTICS           | -    | -      | -                | -       | -              |
| AUDIT               | -    | -      | -                | -       | -              |
| TESTING             | ✓    | ✓      | -                | ✓       | -              |
| PROJECT\_MANAGEMENT | ✓    | ✓      | -                | -       | ✓              |

**Note**: If Testing Execute permission exists, the system automatically adds Testing Manage, API Integrator View, Connections View, Identity & Access Control View, and Secrets & Certificates View permissions.

## Automatic Permission Expansion

The system automatically adds additional permissions for roles with certain permissions. This is to meet inter-role dependencies and workflow requirements:

* **API Developer** (if API Management Manage exists): API Integrator Execute, Connections Manage, Identity & Access Control Manage, Secrets & Certificates Manage
* **API Creator** (if API Creator Manage exists): API Integrator View, Monitoring View, Analytics & Reports View, Audit & Application Logs View
* **API Security** (if Identity & Access Control Manage exists): Monitoring View, Analytics & Reports View, Testing View+Execute
* **API Analytics** (if Analytics & Reports View exists): API Integrator View
* **API Tester** (if Testing Execute exists): Testing Manage, API Integrator View, Connections View, Identity & Access Control View, Secrets & Certificates View