---
title: What Permissions Are Available To Users Via A Permissions Matrix?
description: This article explains what permissions are available to assign to users as part of Roles or as direct permissions in the form of a permissions matrix.
---

[Skip to content](https://kb.edgescan.com/knowledge/what-permissions-are-available-to-users-via-a-permissions-matrix#main-content)

English

Show submenu for translations

[![Edgescan Cybersecurity Platform | EASM + RBVM + PTaaS](https://kb.edgescan.com/hs-fs/hubfs/Logos/23LOGOS-thicker/Edgescan-Logo-Black.png?width=200&height=40&name=Edgescan-Logo-Black.png)](https://www.edgescan.com/)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations

 Search the Edgescan knowledge base

- There are no suggestions because the search field is empty.

1. [Help Center](https://kb.edgescan.com/knowledge?hsLang=en)
2. [Organization Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en)
3. [User Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#user-administration)

# What Permissions Are Available To Users Via A Permissions Matrix?

## This article explains what permissions are available to assign to users as part of Roles or as direct permissions in the form of a permissions matrix.

Version Number: v1.0.0

Published Date: 25 May 2026

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_

 

| **User** | **Scope available: All, User, Organization** |
| --- | --- |
| **Permission** | **User** |
| View | View Users in current users organization |
| View Users' Role Assignments |  |
| Edit | Create User alerts |
| Update User alerts |  |
| Delete User alerts |  |
| Update User |  |
| Lock User |  |
| Unlock User |  |
| Reset Password |  |
| Reset Email |  |
| Set OTP secrey |  |
| Delete | Delete User |
| Assign Role | Assign roles to User |
| Remove roles from User |  |
| **Organization** | **Scope available: All, Organization** |
| **Permission** | **User** |
| View | View Organizations |
| Edit | Edit Organizations |
| Licence oversight | View licence utilization summary on organization |
| Edit options | Global settings feature |
| Edit SLAs | Create SLAs |
| Edit SLAs |  |
| Delete SLAs |  |
| Bulk replace SLAs |  |
| Tag oversight | Check oversight permissions |
| **Permission** | **Scope available: All, User, Organization** |
| **Permission** | **User** |
| Edit | Grant permissions on target user |
| Deny permissions on target user |  |
| View | View permissions on target user |
| Resolve permissions on target user |  |
| Delete | Delete permission on target user |
| **Location Specifier** | **Scope available: All, Location Specifier, Asset, Organization** |
| **Permission** | **User** |
| View | View location specifiers on an asset |
| Edit | Edit location specifiers on an asset |
| Delete | Delete location specifiers on a asset |
| **Licence** | **Scope available: All, Licence, Organization** |
| **Permission** | **User** |
| View | View Licences |
| Edit | Assign Licences |
| Unassign Licences |  |
| Upgrade | Upgrade a consumed active licence to another licence |
| **Order** | **Scope available: All, Order, Organization** |
| **Permission** | **User** |
| View | View Orders |
| **Pause Schedule** | **Scope available: All, Organization, Scanning Schedule** |
| **Permission** | **User** |
| View | View pause schedules |
| View pause windows |  |
| Create | Create Pause Schedule |
| Edit | Edit Pause Schedule |
| Delete | Delete Pause Schedule |
| **EASM/Investigation** | **Scope available: All, EASM/Investigation, Organization** |
| **Permission** | **User** |
| View | View Easm Investigations |
| Create | Create EASM Investigations on an Organization |
| Create EASM Investigation schedules |  |
| Edit | Edit EASM Investigations |
| Edit EASM Investigation schedules |  |
| Delete | Delete EASM investigations |
| **Browser Recording** | **Scope: All, Organization** |
| **Permission** | **User** |
| View | View the details of browser recording and their scanner interaction steps. |
| Create | Create new browser recording by uploading chrome recording files. |
| Edit | Edit existing browser recording and their scanner interaction steps. |
| Delete | Delete browser recording. |
| **Credential Vault** | **Scope: All, Credential Vault, Organization** |
| **Permission** | **User** |
| View | View credentials and their details |
| View credential types, scopes, and roles |  |
| View associated assets and authentication workflows |  |
| Create | Create new credentials |
| Define credential information (SSH, SMB, NTLM, ESXi, OAuth, Dynamic Form, Basic Auth) |  |
| Edit | Edit existing vault credentials |
| Update credential information, descriptions, scopes, and roles |  |
| Change organization assignment if user also has create permission on target organization and no authentication workflows are assigned |  |
| Delete | Delete shared credentials not assigned to authentication workflows |
| **Role** | **Scope: All, Organization** |
| **Permission** | **User** |
| View | View Roles |
| View Role Permissions |  |
| Create | Create New Roles |
| Edit | Edit Roles |
| Add Role Permissions |  |
| Update Role Permissions |  |
| Delete Role Permissions |  |
| Bulk Create Role Permissions |  |
| Bulk Delete Role Permissions |  |
| Delete | Delete Role |
| **Scan Config** | **Scope: All, Organization** |
| **Permission** | **User** |
| View | View scan configurations for assets |
| including config type and scan-config detail fields exposed by the API (for example web target selection strategy and per-config info such as scanner-enabled/credential-limits views). |  |
| Create | Create a new scan configuration |
| Edit | Edit scan configuration settings |
| Delete | Delete existing scan config |
| Manage Authentication | Manage authentication setup on a scan config, e.g. |
| show/create/delete authentication workflows |  |
| manage credential field mappings |  |
| create/delete scanner automation assignments linking browser recordings to workflows. |  |
| Note: This permission replaces the Authentication Workflow View, Create, Edit, and Delete permissions. To access authentication workflows, users need view on Scan Config (to list them) and manage\_authentication on Scan Config (for all other operations). The Authentication Workflow CRUD permissions are not enforced at runtime. |  |
| Manage Session Verification | Manage session verification resources on a scan config: |
| request macros |  |
| request macro steps |  |
| verification indicators |  |
| (view/create/edit/delete operations on those resources). |  |
| Manage Token Mappings | Manage token mapping resources on a scan config: |
| token sets |  |
| token mappings |  |
| (view/create/edit/delete), including extraction/injection and token transformation configuration. |  |
| **Insight** | **Scope: All, Organization** |
| **Permission** | **User** |
| View | View Insight |
| Edit | Update Insight |
| set the expiry\_date, which causes a new insight to be generated asynchronously |  |
| **OptIn** | **Scope: All, Organization** |
| **Permission** | **User** |
| View | View OptIn |
| Create | Create OptIn |
| Edit | Update OptIn |
| to revoke an OptIn |  |

 

 

- [Getting Started](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#main-content)

    - [Quick Start](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#quick-start)
    - [Prerequisites & Network Requirements](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#prerequisites-network-requirements)
    - [Compliance Context](https://kb.edgescan.com/knowledge/getting-started?hsLang=en#compliance-context)
- [Attack Surface Management](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#main-content)

    - [Concepts](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#concepts)
    - [Discovery Methods](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#discovery-methods)
    - [Asset Inventory](https://kb.edgescan.com/knowledge/attack-surface-management?hsLang=en#asset-inventory)
- [Vulnerability Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#main-content)

    - [Enabling & Disabling Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#enabling-disabling-scanning)
    - [Scope & Targeting](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scope-targeting)
    - [Setting Authentication](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#setting-authentication)
    - [DAST Scanning](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#dast-scanning)
    - [API Settings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#api-settings)
    - [Scanning Complex Workflows](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#scanning-complex-workflows)
    - [Vulnerability Risk Ratings](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#vulnerability-risk-ratings)
    - [Additional Configurations](https://kb.edgescan.com/knowledge/vulnerability-scanning?hsLang=en#additional-configurations)
- [Agentic PTaaS](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#main-content)

    - [Overviews and Concepts](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#overviews-and-concepts)
    - [Using Atomic](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#using-atomic)
    - [Safety and Privacy](https://kb.edgescan.com/knowledge/agentic-ptaas?hsLang=en#safety-and-privacy)
- [Human PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#main-content)

    - [Concepts & Methodologies](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#concepts-methodologies)
    - [Scheduling PTaaS](https://kb.edgescan.com/knowledge/human-ptaas?hsLang=en#scheduling-ptaas)
- [Platform Usage](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#main-content)

    - [Platform Navigation](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#platform-navigation)
    - [Managing Assets](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#managing-assets)
    - [Managing Vulnerabilities](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#managing-vulnerabilities)
    - [Managing Licenses](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#managing-licenses)
    - [Managing Credentials](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#managing-credentials)
    - [Asset Blockers](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#asset-blockers)
    - [Reporting & Dashboards](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#reporting-dashboards)
    - [AI Insights](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#ai-insights)
    - [Compliance & Frameworks](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#compliance-frameworks)
    - [Additional License Details](https://kb.edgescan.com/knowledge/platform-usage?hsLang=en#additional-license-details)
- [Platform Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#main-content)

    - [Notifications & Events](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#notifications-events)
    - [Internal/Private Testing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#internal-private-testing)
    - [API & Authentication](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#api-authentication)
    - [Scheduled Exports](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#scheduled-exports)
    - [Cloud Platforms](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloud-platforms)
    - [CloudHook](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#cloudhook)
    - [ITSM & Ticketing](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#itsm-ticketing)
    - [SIEM & SOAR](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#siem-soar)
    - [CI/CD & DevOps](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#ci-cd-devops)
    - [Communication Automation](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#communication-automation)
    - [Other Automations](https://kb.edgescan.com/knowledge/platform-automation?hsLang=en#other-automations)
- [Organization Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#main-content)

    - [Organization Setup](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-setup)
    - [User Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#user-administration)
    - [Roles Administration](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#roles-administration)
    - [Account Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#account-settings)
    - [Organization Settings](https://kb.edgescan.com/knowledge/organization-administration?hsLang=en#organization-settings)
- [Updates & Announcements](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#main-content)

    - [2026 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2026-updates)
    - [2025 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2025-updates)
    - [2024 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2024-updates)
    - [2023 Updates](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#2023-updates)
    - [API Changes](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#api-changes)
    - [OWASP API 2019](https://kb.edgescan.com/knowledge/updates-announcements?hsLang=en#owasp-api-2019)

[![Chill listening crop-3](https://kb.edgescan.com/hs-fs/hubfs/Edgescan-blac-logo.webp?width=68&height=55&name=Edgescan-blac-logo.webp "Chill listening crop-3")](https://www.edgescan.com)

Copyright © 2026 Edgescan. All rights reserved.