Global permissions

A global permission is a permission that applies across all Collibra applications. It can be added to a global role.

The following table contains an overview of the global permissions and the default configuration of the out-of-the-box global roles.

Global permission	Global permission	Description	Required license	New license
AI Agents	AI Agents	The AI Agents global permission contains a global permission that allows users to enable and configure all AI agents and the Collibra AI Copilot.
Manage all agents	AI Agents Manage all agents	The AI Agents > Manage all agents global permission allows users to enable and configure all AI agents and the Collibra AI Copilot.	Standard	Creator
AI Governance	AI Governance	The AI Governance global permission contains a global permission that allows users to register and work with AI use cases.
Manage dashboard layout	AI Governance Manage dashboard layout	The AI Governance > Manage dashboard layout global permission allows users to hide, show, and reorder widgets within the AI Command Center dashboard.	Standard	Creator
View summary dashboard	AI Governance View summary dashboard	The AI Governance > View summary dashboard global permission allows user to access and view the AI Command Center dashboard.	Read-only	Viewer
Register AI Use Case	AI Governance Register AI Use Case	The AI Governance > Register AI Use Case global permission allows users to register AI use cases. For users without this permission, the Register AI Use Case button is not shown on product pages.	Read-only	Viewer
Register AI Model	AI Governance Register AI Model	The AI Governance > Register AI Model global permission allows users to register AI models. For users without this permission, the Register AI Model button is not shown on product pages.	Read-only	Viewer
Register AI Agent	AI Governance Register AI Agent	The AI Governance > Register AI Agent global permission allows users to register AI agents.	Read-only	Viewer
Assessments	Assessments	The Assessments global permission contains a global permission that allows users to view and manage all assessments.
Administration	Assessments Administration	The Assessments > Administration global permission allows users to perform administrative tasks in Assessments. They can view all private assessments and change the permissions of all assessments.	Read-only	Creator
Conduct assessments	Assessments Conduct assessments	The Assessments > Conduct assessments global permission allows users to conduct, edit, copy, delete, and make assessments obsolete, including public assessments and those that they own or are assigned.	Standard	Contributor
Manage templates	Assessments Manage templates	The Assessments > Manage templates global permission allows users to view, create, edit, and manage assessment templates.	Standard	Creator
Data Notebook	Data Notebook	The Data Notebook global permission contains global permissions that allow users to manage data notebooks.
Manage all notebooks	Data Notebook Manage all notebooks	The Data Notebook > Manage all notebooks allows users to manage notebooks. Tip A user who has this permission can view the content in all the notebooks regardless of who created the notebooks, even including private notebooks via direct links. Therefore, consider giving this permission to only users who have the Sysadmin global role.	Standard	Creator
Manage data sources	Data Notebook Manage data sources	The Data Notebook > Manage data sources allows users to register data sources for Data Notebook and also remove the registered data sources.	Standard	Creator
Manage settings	Data Notebook Manage settings	The Data Notebook > Manage settings allows users to customize settings for Data Notebook, such as chart colors and number formatting in query results.	Standard	Creator
Edge	Edge	The Edge global permission contains global permissions that allow users to install and manage Edge sites. Note Currently, Edge is an on-demand cloud service. It will only become the default service once the migration from Jobserver to Edge is complete.
Manage connections and capabilities	Edge Manage connections and capabilities	The Edge > Manage connections and capabilities permission allows users to add, edit and delete connections and capabilities.	Read-only	Viewer
Install Edge sites	Edge Install Edge sites	The Edge > Install Edge sites permission allows users to download the installer and properties file that you need to install an Edge site.	Read-only	Viewer
Connect as Edge site to Collibra	Edge Connect as Edge site to Collibra	The Edge > Connect as Edge site to Collibra permission allows Edge sites to connect to Collibra Platform.	Read-only	Viewer
Manage Edge sites	Edge Manage Edge sites	The Edge > Manage Edge sites permission allows users to create, edit and delete Edge sites.	Read-only	Viewer
Upload Edge charts	Edge Upload Edge charts	The Edge > Upload Edge charts permission allows users who are installing an Air-gapped Edge site via the ZARF CLI, to add the `collibra-edge` chart to Collibra Platform.	Read-only	Creator
View Edge connections and capabilities	Edge View Edge connections and capabilities	The Edge > View Edge connections and capabilities permission allows users to open and see the connections and capabilities of an Edge or Collibra Cloud site.	Read-only	Viewer
View logs from Edge site	Edge View logs from Edge sites	The Edge > View logs from Edge sites permission allows users to download JDBC log files from the Jobs Dashboard.	Read-only	Viewer
Catalog	Catalog	The Catalog global permission contains global permissions that allow users to use advanced features of Data Catalog.
Advanced Data Type (Advanced Data Types were available only for Jobserver and in the Classic UI)	Catalog Advanced Data Type	The Catalog > Advanced Data Type permission group contains global permissions that allow users to manage advanced data types.
Add	Catalog Advanced Data Type Add	The Catalog > Advanced Data Type > Add global permission allows users to create advanced data types.	Standard	Creator
Update	Catalog Advanced Data Type Update	The Catalog > Advanced Data Type > Update global permission allows users to edit advance data types.	Standard	Creator
Remove	Catalog Advanced Data Type Remove	The Catalog > Advanced Data Type > Remove global permission allows users to delete advanced data types.	Standard	Creator
Register Profiling Information	Catalog Register Profiling Information	The Catalog > Register Profiling Information global permission allows API users to enable data profiling when registering a data source.	Standard	Creator
Technical Lineage	Catalog Technical Lineage	The Catalog > Technical Lineage global permission allows users to see the technical lineage of a data source.	Read-only	Viewer
Classification	Classification	The Classification permission group contains global permissions that allow users to use the new data classification method via Edge.
Classify	Classification Classify	The Classification > Classify global permission allows users to classify columns via the new classification method.	Read-only	Contributor
Data Classes	Classification Data Classes	The Classification > Data Classes permission group contains global permissions that allow users to manage data classes in the new data classification method.
Add	Classification Data Classes Add	The Classification > Data Classes > Add global permission allows a user to add new data classes in the new data classification method.	Standard	Creator
Update	Classification Data Classes Update	The Classification > Data Classes > Update global permission allows a user to modify data classes in the new data classification method.	Standard	Creator
List Values	Classification Data Classes List Values	The Classification > Data Classes > List Values global permission allows the Edge or Collibra Cloud site to communicate with Collibra in the new data classification method. This permission should be enabled only for the Edge site user.	Read-only	Viewer
Read	Classification Data Classes Read	The Classification > Data Classes > Read global permission allows a user to view the data classes in the new data classification method.	Read-only	Viewer
Remove	Classification Data Classes Remove	The Classification > Data Classes > Update global permission allows a user to delete data classes in the new data classification method.	Standard	Creator
Data Quality	Data Quality	The Data Quality permission group contains global permissions that allow users to manage Data Quality & Observability settings and configure connections to data sources.
Manage Data Sources	Data Quality Manage Data Sources	The Data Quality > Manage Data Sources global permission allows users to manage resource roles and responsibilities for Edge connections with the Data Quality Pushdown capability.	Standard	Creator
Manage Settings	Data Quality Manage Settings	The Data Quality > Manage Settings global permission allows users to access the Settings page where they can manage data quality limits and dimensions.	Standard	Creator
Workflow	Workflow	The Workflow permission group contains global permissions that allow users to manage workflows.
View all running tasks	Workflow View all running tasks	The Workflow > View all running tasks global permission allows users to see ongoing tasks that are assigned to other users in the All Tasks tab on the tasks page.	Standard	Contributor
Use workflow message events	Workflow Use workflow message events	The Workflow > Use workflow message events global permission allows users to pass message events to the workflow engine via an API call. Note This is used for API users.	Read-only	Contributor
Participate in workflow	Workflow Participate in workflow	The Workflow > Participate in workflow global permission allows users that meet workflow task configuration requirements to be assigned and complete workflow tasks.	Read-only	Contributor
Start workflow	Workflow Start workflow	The Workflow > Start workflow global permission allows users that meet workflow configuration requirements to start workflows.	Read-only	Viewer
Logs	Logs	The Logs permission group contains global permissions that allow users to access Collibra logs.
View	Logs View	The Logs > View global permission allows users to access and download the Collibra application logs.	Read-only	Viewer
Product Rights	Product Rights	The Product Rights permission group contains global permissions that allow users to access Collibra applications.
AI Copilot	Product Rights AI Copilot	The Product Rights > AI Copilot global permission allows users to chat with Collibra AI Copilot.	Read-only	Viewer
AI Governance	Product Rights AI Governance	The Product Rights > AI Governance global permission allows users to access AI Governance.	Read-only	Viewer
Assessments	Product Rights Assessments	The Product Rights > Assessments global permission allows users to access Assessments. They can view public assessments and the assessments that they own or are assigned.	Read-only	Viewer
Business Semantics Glossary	Product Rights Business Semantics Glossary	The Product Rights > Business Semantics Glossary global permission allows users to access the Business Glossary application.	Read-only	Viewer
Catalog	Product Rights Catalog	The Product Rights > Catalog global permission allows users to access the Data Catalog application and Data Classification.	Read-only	Viewer
Control Tower	Product Rights Control Tower	Allows users full access to the Control Tower product pages.	Read-only	Viewer
Data Contract	Product Rights Data Contract	The Product Rights > Data Contract global permission allows users to access the Data Contract feature.	Standard	Contributor
Data Dictionary	Product Rights Data Dictionary	The Product Rights > Data Dictionary global permission allows users to access the Data Dictionary application.	Read-only	Viewer
Data Helpdesk	Product Rights Data Helpdesk	The Product Rights > Data Helpdesk global permission allows users to access the Data Helpdesk application.	Read-only	Contributor
Data Marketplace	Product Rights Data Marketplace	The Product Rights > Data Marketplace global permission allows users to access standalone Data Marketplace and Data Marketplace in Search.	Read-only	Viewer
Data Notebook	Product Rights Data Notebook	The Product Rights > Data Notebook global permission allows users to access Data Notebook and create notebooks. For more details, go to Permissions.	Standard	Contributor
Data Quality	Product Rights Data Quality	The Product Rights > Data Quality global permission allows users to access Data Quality & Observability product pages.	Read-only	Viewer
Data Quality Integration	Product Rights Data Quality Integration	The Product Rights > Data Quality Integration global permission allows users to access the assets, relations, and workflows required to support the integration of Collibra Platform with Data Quality & Observability Classic.	Read-only	Viewer
Data Stewardship Manager	Product Rights Data Stewardship Manager	The Product Rights > Data Stewardship Manager global permission allows users to access the Stewardship application.	Read-only	Viewer
Edge	Product Rights Edge	The Product Rights > Edge global permission allows users to manage Edge.	Standard	Creator
Guided Stewardship	Product Rights Guided Stewardship	The Product Rights > Guided Stewardship global permission allows users to access Guided Stewardship tools such as the Physical Data Connector.	Read-only	Contributor
Policy Manager	Product Rights Policy Manager	The Product Rights > Policy Manager global permission allows users to access the Policy Manager application.	Read-only	Viewer
Privacy	Product Rights Privacy	The Product Rights > Privacy global permission allows users to access the Privacy landing page.	Read-only	Viewer
Protect	Product Rights Protect	Go to Permissions.	Read-only	Viewer
Reference Data Manager	Product Rights Reference Data Manager	The Product Rights > Reference Data Manager global permission allows users to access the Reference Data application.	Read-only	Viewer
System Administration	Product Rights System Administration	The Product Rights > System Administration global permission allows users to manage all sections of the Collibra Settings, including the general settings, operating model, roles, permissions, users, groups, and workflows.	Standard	Creator
Unstructured AI	Product Rights Unstructured AI	The Product Rights > Unstructured AI global permission allows users to access the Unstructured AI feature.	Standard	Contributor
User Administration	Product Rights User Administration	The Product Rights > User Administration global permission allows users to manage users and groups.	Standard	Creator
Workflow Administration	Product Rights Workflow Administration	The Product Rights > Workflow Administration global permission allows users to access the Workflow tab page of the Collibra Settings.	Standard	Creator
Workflow Designer access	Product Rights Workflow Designer access	The Product Rights > Workflow Designer access global permission allows users to access the Workflow Designer application from the Collibra menu. Note This permission becomes available after you enable the Allow access to the Workflow Designer Collibra configuration setting.	Read-only	Creator
Protect	Protect	Go to Permissions.
Resources	Resources	The Resources permission group contains global permissions that allow users to see and manage assets, domains and communities.
Export	Resources Export	The Resources > Export global permission allows users to export assets or complex relations and their characteristics.	Read-only	Viewer
Import	Resources Import	The Resources > Import global permission allows users to import assets or complex relations. Users that have a role with this permission can also create or edit communities and domains that are related to the imported assets.	Read-only	Creator
Manage all resources	Resources Manage all resources	The Resources > Manage all resources global permission allows users to see and manage all communities and domains, and assets whose type belongs to a product whose Product Right the user has, regardless of responsibilities. Note This permission does not include the Export and Import permissions.	Standard	Creator
Views, Dashboards, Search filters	Views, Dashboards, Search filters	The Views, Dashboards, Search filters permission group contains global permissions that allow users to manage and share views, dashboards and search filters.
Manage shared Views, Dashboards, Search filters	Views, Dashboards, Search filters Manage shared Views, Dashboards, Search filters	The Views, Dashboards, Search filters > Manage shared Views, Dashboards, Search filters global permission allows users to share, edit and delete views, dashboards and search filters that are shared.	Standard	Creator
Manage your own Views, Dashboards, Search filters	Views, Dashboards, Search filters Manage your own Views, Dashboards, Search filters	The Views, Dashboards, Search filters > Manage your own Views, Dashboards, Search filters global permission allows users to edit and delete your own views, dashboards and search filters.	Read-only	Viewer
Override read-only attributes	Resources Override read-only attributes	The Resources > Override read-only attributes global permission allows users to override the read-only flag on attribute types and update values if needed.	Standard	Creator
Share your own Views, Dashboards, Search filters	Views, Dashboards, Search filters Share your own Views, Dashboards, Search filters	The Views, Dashboards, Search filters > Share you own Views, Dashboards, Search filters global permission allows users to share your own views, dashboards and search filters.	Read-only	Viewer
View Permissions	View Permissions	The View Permissions permission group contains global permissions that allow users to see all views, which includes dashboards, diagram views, asset views, search filters and relation views on an asset page.
View All	View Permissions View All	The View Permissions > View All global permission allows users to see all communities, domains and the assets within them, thus ignoring view permissions.	Read-only	Creator
Insights	Insights	The Insights global permission contains global permissions related to Insights Data Access and Usage Analytics.
Download the Insights reporting data	Insights Download the Insights reporting data	The Insights > Download the Insights reporting data global permission allows users to download the data from the Insights Data Access API (formerly called Reporting Data Layer).	Standard	Creator
View Insights reports	Insights View Insights reports	The Insights > View Insights reports global permission allows users to access the dashboard widgets.	Read-only	Viewer
View Usage Analytics Summary	Insights View Usage Analytics summary	The Insights > View Usage Analytics Summary global permission allows users to access the Usage Analytics dashboard, excluding the detailed usage data.	Read-only	Contributor
View Usage Analytics reports	Insights View Usage Analytics reports	The Insights > View Usage Analytics reports global permission allows users to access the Usage Analytics dashboard, including the detailed usage data, and also download the data.	Read-only	Contributor
Tags	Tags	The Tags permission group contains global permissions that allow users to see and manage tags in the Stewardship application.
Manage tags	Tags Manage tags	The Tags > Manage tags global permission allows users to edit and delete tags on the tags page in the Stewardship application.	Standard	Creator
View tags	Tags View tags	The Tags > View tags global permission allows users to see the Tags page in the Stewardship application. Note You don't need a role with the View tags permission to see tags that are set by stewards while searching in table views, diagram views, global views, and asset pages.	Read-only	Contributor
Unstructured AI	Unstructured AI	The Unstructured AI permission group contains global permissions that allow users to manage the Unstructured AI product.
Manage Unstructured Connections	Manage Unstructured Connections	Allows users to manage connections to unstructured data sources.	Standard	Creator
Manage Unstructured Jobs	Manage Unstructured Jobs	Allows users to manage unstructured data jobs.	Standard	Contributor