Charts permissions
Charts uses three access levels, decided by your role on the service.
The three levels
Section titled “The three levels”| Level | Service roles that have it |
|---|---|
| Read | Any member of the service |
| Edit | Owner, editor, admin |
| Admin | Owner, admin |
A platform-wide editor role also grants edit access, whatever the service role says. Someone holding system_admin bypasses every check.
What each level allows
Section titled “What each level allows”| Operation | Level |
|---|---|
| Open the workspace and see the chart list | Read |
| Open a chart and read it | Read |
| Open a published chart | Read |
| Export a chart | Read |
| Create a chart from a template | Edit |
| Draw, connect, and edit shapes | Edit |
| Annotate steps and edit the table | Edit |
| Import and export step CSV | Edit |
| Create and edit scenarios | Edit |
| Add pages and layers | Edit |
| Comment on a chart | Edit |
| Publish | Edit |
| Rename and duplicate | Edit |
| Delete a chart | Admin |
Deleting is the only everyday action that needs admin. Everything else people usually want to do sits at edit.
Published charts
Section titled “Published charts”Publishing to the Internal Publisher requires viewers to be signed in, and the internal access rules decide which of them can open it.
Publishing does not widen access on its own, so it is not a way to share a chart with someone outside the service.
If Allow comments was switched on, signed-in viewers can leave feedback on the published copy without needing edit access to the chart itself. That is the usual way to collect corrections from people who should not be changing the diagram.
Related
Section titled “Related”Review and publish covers the publishing flow. Troubleshooting covers what an access failure looks like.